Skip to content
Avatar
🌍
Hack the planet!
🌍
Hack the planet!
  • Block or report user

    Block or report DavidBuchanan314

    Block user

    Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

    Report abuse

    Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

    Report abuse
351 followers · 25 following · 229

Highlights

  • Arctic Code Vault Contributor

Organizations

@nx-python @webosbrew
DavidBuchanan314/README.md

This is what happens when you let a Reverse Engineer write code. Here's an overview of my more useful repos:

Exploits

  • RootMyTV - A remote(-ish) root exploit chain for WebOS TVs.

  • NXLoader - Exploit CVE-2018-6242 from (almost) any Android device.

  • fusee-nano - Exploit CVE-2018-6242 from embedded linux devices.

  • CVE-2017-13672 - A PoC for CVE-2017-13672 - QEMU DoS

Tools

  • dlinject - Like LD_PRELOAD but for already-running programs.

  • webos-vncserver - A VNC server for TVs running WebOS.

  • libleakmydata - LD_PRELOAD hooks to bypass SSL certificate verification.

  • TARDIS - Trace And Rewrite Delays In Syscalls.

  • Turbo-Recadmiumator - Yet another browser extension to enable 1080p Netflix playback on "unsupported" platforms.

  • rc4 - A Python3 RC4 implementation that doesn't suck.

  • tweetable-polyglot-png - Pack up to 3MB of data into a tweetable PNG polyglot file.

Toys

  • unsafe-python - Showcasing CPython's memory unsafety "features".

  • 6502-emu - A 6502 emulator that I've been meaning to rewrite since forever.

  • chip8 - Yet another CHIP-8 emulator.

  • pwn-mbr - A very basic MBR hijack PoC.

Misc

  • aes-playground - Pedagogical AES implementation(s)

  • wifi-sdcf - Reverse Engineering notes for a "WiFI SD Card" device.

Popular repositories

  1. tweetable-polyglot-png

    Pack up to 3MB of data into a tweetable PNG polyglot file.

    Python 1.5k 55

  2. dlinject

    Inject a shared library (i.e. arbitrary code) into a live linux process, without ptrace

    Python 525 51

  3. NXLoader

    My first Android app: Launch Fusée Gelée payloads from stock Android (CVE-2018-6242)

    Java 418 54

  4. pwn-mbr

    A simple MBR hijack demonstration

    C 154 43

  5. TARDIS

    Trace And Rewrite Delays In Syscalls: Hooking time-related Linux syscalls to warp a process's perspective of time, using ptrace.

    C 145 11

  6. libleakmydata

    A simple LD_PRELOAD library to disable SSL certificate verification. Inspired by libeatmydata.

    C 134 8

231 contributions in the last year

Mar Apr May Jun Jul Aug Sep Oct Nov Dec Jan Feb Mar Mon Wed Fri
Learn how we count contributions.
Less More