quarkslab

Raw binary firmware analysis software

Kubernetes focused container assessment and context discovery tool for penetration testing

Dump various types of Windows credentials without injecting in any process.

SOCKS5 proxy tool that uses Azure Storage services as a means of communication.

Manipulation, canonicalization and identification of mixed boolean-arithmetic symbolic expressions

Snapshot-based coverage-guided windows kernel fuzzer

Quarkslab conference talks

IRMA is an asynchronous & customizable analysis system for suspicious files.

UEFI bootkit

Quarkslab Bindiffer but not only !

Quokka: A Fast and Accurate Binary Exporter

system scanner

PoC to bypass Android restrictions

Scripts to unpack APK protected by Legu

This repository contains the tools we used in our research on the Google Titan M chip

AERoot is a command line tool that allows you to give root privileges on-the-fly to any process running on the Android emulator with Google Play flavors AVDs.

An eBPF playground

A collection of tools for security research on Starlink's User Terminal

NTT-based Fast Lattice library

Greybox Synthesizer geared for deobfuscation of assembly instructions.

A tool for firmware cartography

PASTIS: Collaborative Fuzzing Framework

Reverse-engineering tools and exploits for Samsung's implementation of TrustZone

Triton-based DSE library with loading and exploration capabilities (and more!)

Collection of various llvm passes

qb-sync is an open source tool to add some helpful glue between IDA Pro and Windbg. Its core feature is to dynamically synchronize IDA's graph windows with Windbg's position.

A tool for debugging macOS virtual machines

Symbolic Simplification with PAttern Matching

PoC associated to the talk "Attacking Samsung Galaxy A* Boot Chain" (https://www.blackhat.com/us-24/briefings/schedule/#attacking-samsung-galaxy-a-boot-chain-and-beyond-38526)

Recover function names, prototypes, and library origins in binaries across IDA, Ghidra, and Binary Ninja.

QuarkslaB Dynamic Linker library

A beginner-friendly CTF about Kubernetes security.

End-to-end encryption plugin for Mattermost

Tool developed to fuzz the GATT layer of the Bluetooth Low Energy protocol based on defined attack scenarios.

PoC for a snapshot-based coverage-guided fuzzer targeting Windows kernel components

Large Commit Precise Vulnerability Dataset based on AOSP CVE

Prevent Apple to mess with keys

An Android HW Attestation demo

Material for an LLVM Tutorial presented at LLVM Dev Meeting 2015