Reconnaissance for AI agents, MCP servers and AI/ML infrastructure for offensive security.

Linux kernel source tree

Publications from Calif

AI Pair Programming in Emacs with Aider

Free educational content on reverse engineering and malware analysis from the FLARE team

This repository contains AI-generated analysis reports produced as part of an automated N-day research pipeline targeting Microsoft components.

Index of the most common vulnerabilities per protocol type, with 460 vulnerabilities across 31 protocol types

An extremely good ASCII art generator, based on machine learning

Reinforcement Learning environments based on the 1993 game Doom

An AI security awesome list / learning journey

🎨 Aesthetic wallpaper collection gathered over a year! Catppuccin, Nord, One Dark themes & cozy vibes. Free for everyone to enjoy 🌟

3 linux kernel bugs chains to do secure comm app using side channel to establish key and establish covert channe;

Cheatsheet, Notes, Payloads and Mayhem for Burp Suite Practitioner Exam (BSCP)

Simple Python scripts to automate Ghidra's version tracking from the command line.

BaymaxTools is a feature code extraction and search plug-in for x64dbg debugger. it is convenient to extract the signature of the specified instruction and the number of occurrences of the signatur…

Workshop on firmware reverse engineering

This repo contains the code for my secure code review challenges. People used this as the primary resource to pass FAANG AppSec interviews 😉

POC for BYOVD

DiffRays is a research-oriented tool for binary patch diffing, designed to aid in vulnerability research, exploit development, and reverse engineering.

Repository containing all training and tutorials completed in preparation for the OSEE in conjunction with the AWE course.

KernJC: Automated Vulnerable Environment Generation for Linux Kernel Vulnerabilities | 🏆 Best Practical Paper Award of RAID 2024

A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts.

Toolkit to weaponize Chromium vulnerabilities into reliable, cross-platform, full-chain exploits

AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.

PoC & Exploit for CVE-2025-32023 / PlaidCTF 2025 "Zerodeo"

Python script that fetches, analyzes, and reports Microsoft Patch Tuesday updates via the MSRC API — with a clean web interface for easy viewing.