Pinned Repositories
BFFx64
CERT's Basic Fuzzing Framework, but 64 bit.
gzdoom-vuln-2018
after a few days and many gummy bear vitamins i've decided to release my research. enjoy!
Misc-Tools
Miscellaneous tools I've developed over the years for help in infosec.
osx_ptrace
library that breaks ptrace that can be used with DYLD_INSERT_LIBRARIES
Rotten-Apples
macOS codesigning translocation vulnerability.
rust-injector
A Windows-based linked library injector, coded in Rust
spooky-scary-skeletons
skeleton for a gamecheat for Deep Rock Galactic I never got around to finishing.
suspend-shim
macOS shim to spawn suspended processes w/ ASLR disabled
symfind-macho
in a cunning act of deception, this doesn't actually read kernel symbols. instead it just reads a bit of binary metadata. how quaint.
ts3crash-analysis
analysis of the teamspeak 3.0.19 crash released by the developers @ r4p3.net
impost0r's Repositories
impost0r/Rotten-Apples
macOS codesigning translocation vulnerability.
impost0r/suspend-shim
macOS shim to spawn suspended processes w/ ASLR disabled
impost0r/hellscape
GIMPLE obfuscator for C, C++, Go, ... all supported GCC targets and front-ends that use GIMPLE.
impost0r/ida_bitfields_macOS
IDA Pro plugin to make bitfield accesses easier to grep
impost0r/perses
X86 Mutation Engine with Portable Executable compatibility.
impost0r/SigMaker-x64
IDA Pro 7 compatible SigMaker plugin
impost0r/argv_clobber
Clobber argv into a null terminator, thus confusing ps. Can be used with prctl to achieve more stealth.
impost0r/bagbak
Yet another frida based iOS dumpdecrypted, supports decrypting app extensions and no SSH required
impost0r/cascade
A thin introspection hypervisor framework that allows for low level resource manipulation.
impost0r/CVE-2021-44186
A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3.
impost0r/debugoff
Linux/macOS anti-debugging and anti-analysis rust library
impost0r/emmutaler
A set of tools for fuzzing SecureROM. Managed to find and trigger checkm8.
impost0r/FIDL
A sane API for IDA Pro's decompiler. Useful for malware RE and vulnerability research
impost0r/FitM
FitM, the Fuzzer in the Middle, can fuzz client and server binaries at the same time using userspace snapshot-fuzzing and network emulation. It's fast and comparably easy to set up.
impost0r/HookCase
Tool for reverse engineering macOS/OS X
impost0r/httpd
impost0r/kmemd
Explore a live Linux kernel's memory using GDB
impost0r/lolhanndead
Mirror of the "LOL HANN DEAD" e-zine by el8/Silverlords
impost0r/macOS-hasher
Take hashes of files before and after an update to diff them with your favorite diffing tool. Generated by ChatGPT (seriously).
impost0r/objc2
C2 using the full power of NSExpressions to replace in memory dylib loading
impost0r/ramiel
uefi diskless persistence technique + OVMF secureboot bypass
impost0r/reverie
An ergonomic and safe syscall interception framework for Linux.
impost0r/semgrep-rules
A collection of my Semgrep rules to facilitate vulnerability research.
impost0r/srd
Welcome to Hoyt's SRD Repo for the Apple Security Research Device. Contribute Code or Open an Issue or Discussion.
impost0r/super-tart
tart, but with custom AVPBooter ROM, serial I/O, DFU mode, GDB debugging (port 8000), and panic halting. See help menus for `tart create` and `tart run` for more info. Requires SIP/AMFI to be disabled for required entitlement.
impost0r/tsffs
A snapshotting, coverage-guided fuzzer for software (UEFI, Kernel, firmware, BIOS) built on SIMICS
impost0r/VulFi
impost0r/warbird-hook
Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard
impost0r/xnu-8020.101.4
impost0r/yolo_dsc
A late bound, hope-for-the-best dyld shared cache extractor