DavidBuchanan314

Pack up to 3MB of data into a tweetable PNG polyglot file.

Craft PNG files that appear completely different in Apple software [NOW PATCHED]

Inject a shared library (i.e. arbitrary code) into a live linux process, without ptrace

MD5-Monomorphic Shellcode Packer - all payloads have the same MD5 hash

My first Android app: Launch Fusée Gelée payloads from stock Android (CVE-2018-6242)

A library to assist writing memory-unsafe code in "pure" python, without any imports (i.e. no ctypes etc.)

A remake of truedread/netflix-1080p which auto-patches cadmium-playercore at runtime to enable enhanced playback features. (NOTE: still working in 2024 😎)

A simple LD_PRELOAD library to disable SSL certificate verification. Inspired by libeatmydata.

A simple MBR hijack demonstration

A stealthy ELF loader - no files, no execve, no RWX

Tools for decrypting MPEG-CENC files without knowledge of the key

A from-scratch atproto PDS implementation in Python

Trace And Rewrite Delays In Syscalls: Hooking time-related Linux syscalls to warp a process's perspective of time, using ptrace.

userscript to offload Anubis PoW to native CPU or GPU code

A minimalist re-implementation of the Fusée Gelée exploit, designed to run on embedded Linux devices. (Zero dependencies)

A userscript that forces twitter to always load images and videos in full resolution

playing with DDR DRAM bus fault injection

RE notes for ILCE-7M4, aka Sony A7 IV mirrorless camera

A minimum viable atproto PDS for protocol experimentation purposes

Documenting the boot process of the Rabbit R1 (MediaTek mt6765, k65v1_64_bsp, Android 13)

Instructions/files for building a custom LEDE image to turn cheap routers into a Nintendo Switch "modchip"/"dongle". Powered by https://github.com/DavidBuchanan314/fusee-nano

WAMpage - A WebOS root LPE exploit chain (CVE-2022-23731)