Explore @IOActive Open Source projects

IOActive, Inc. (@IOActive)

IOActive

Stars
2,416
Global Org. Rank 8,258 (Top 3 %)
Registered about 12 years ago
Most used languages

Python
32.1 %

C
28.6 %

Java
25.0 %

JavaScript
7.1 %

C++
3.6 %

Shell
3.6 %

jdwp-shellifier

XDiFF

Extended Differential Fuzzing Framework

RepoSsessed

A project designed to parse public source code repositories and find various types of vulnerabilities.

laf

This project intends to provide a series of tools to craft, parse, send, analyze and crack a set of LoRaWAN packets in order to audit or pentest the security of a LoraWAN infrastructure.

Platbox

UEFI and SMM Assessment Tool

I-know-where-your-page-lives

I Know Where Your Page Lives: Derandomizing the latest Windows 10 Kernel - ZeroNights 2016

Melkor_ELF_Fuzzer

Melkor is a very intuitive and easy-to-use ELF file format fuzzer to find functional and security bugs in ELF parsers.

FuzzNDIS

A Fuzzer for Windows NDIS Drivers OID Handlers

kmdf_re

Helper idapython code for reversing kmdf drivers

BlueCrawl

Frida (Android) Script for extracting bluetooth information

FileFormatFuzzing

AOSP-DownloadProviderDbDumperSQLiWhere

PoC Exploiting SQL Injection in Android's Download Provider in Selection Parameter (CVE-2019-2198)

AOSP-ExploitUserDictionary

PoC Exploit for AOSP UserDictionary Content Provider (CVE-2018-9375)

SearchAndCollect

search and collect windows files from multiple locations on machine and store in one centralized directory

AOSP-DownloadProviderHijacker

PoC Exploiting Permission Bypass in Android's Download Provider (CVE-2018-9468)

AutoGadgetFS

USB testing framework

BurpJDSer-ng

Allows you to deserialize java objects to XML and lets you dynamically load classes/jars as needed

uefi_research

A repository with UEFI research stuff

Embedded-Defense

Sample embedded defense code for applications written in .NET, Java, PHP and Python.

PinguCrew

Paddo

Framework for auditing and conducting "padding oracle" attacks

AOSP-DownloadProviderDbDumper

PoC Exploiting SQL Injection in Android's Download Provider (CVE-2018-9493)

BlackHat_2017

Materials for "Go Nuclear: Breaking Radiation Monitoring Devices"

AOSP-DownloadProviderHeadersDumper

PoC Exploiting Headers Disclosure in Android's Download Provider (CVE-2018-9546)

NexusTacos

A vulnerability in the SNMP module of NX-OS could allow an unauthenticated, remote attacker to disclose potentially sensitive information.

FileSquattingExample

FileSquatting Exploitation by Example

HL7-Fuzzer

An HL7 message fuzzer ( client and server )

rubenBlackHat2018

Last Call For Satcom Security Materials

AOSP-DownloadProviderDbDumperSQLiLimit

PoC Exploiting SQL Injection in Android's Download Provider in Sort Parameter (CVE-2019-2196)