David Buchanan

Pack up to 3MB of data into a tweetable PNG polyglot file.

Craft PNG files that appear completely different in Apple software [NOW PATCHED]

Inject a shared library (i.e. arbitrary code) into a live linux process, without ptrace

MD5-Monomorphic Shellcode Packer - all payloads have the same MD5 hash

My first Android app: Launch Fusée Gelée payloads from stock Android (CVE-2018-6242)

A library to assist writing memory-unsafe code in "pure" python, without any imports (i.e. no ctypes etc.)

A remake of truedread/netflix-1080p which auto-patches cadmium-playercore at runtime to enable enhanced playback features. (NOTE: still working in 2024 😎)

A simple LD_PRELOAD library to disable SSL certificate verification. Inspired by libeatmydata.

A simple MBR hijack demonstration

A stealthy ELF loader - no files, no execve, no RWX

Trace And Rewrite Delays In Syscalls: Hooking time-related Linux syscalls to warp a process's perspective of time, using ptrace.

Tools for decrypting MPEG-CENC files without knowledge of the key

A from-scratch atproto PDS implementation in Python

userscript to offload Anubis PoW to native CPU or GPU code

playing with DDR DRAM bus fault injection

A userscript that forces twitter to always load images and videos in full resolution

A minimalist re-implementation of the Fusée Gelée exploit, designed to run on embedded Linux devices. (Zero dependencies)

No description.

A minimum viable atproto PDS for protocol experimentation purposes

Documenting the boot process of the Rabbit R1 (MediaTek mt6765, k65v1_64_bsp, Android 13)

Instructions/files for building a custom LEDE image to turn cheap routers into a Nintendo Switch "modchip"/"dongle". Powered by https://github.com/DavidBuchanan314/fusee-nano

WAMpage - A WebOS root LPE exploit chain (CVE-2022-23731)

Placeholder repo 👀

Yet another vanity did:plc miner

A Python library enabling ergonomic Scratch 3.0 code generation.

Trying to make bitmap web fonts look better.

An extremely hacky VNC server for WebOS - Works by reading directly from the GPU's framebuffer.

A rather fast Game-of-Life implementation in pure Python (plus pysdl2)

A simple 6502 emulator, with I/O via a 6850 UART.

Universal Android root tool based on CVE-2016-5195. Watch this space.

A bare-bones CLI tool for signing did:plc operations with a yubikey

A backward-compatible subset of the PNG file format, for uncompressed bitmaps

The DNS server for people who hate DNS

A reasonably fast DAG-CBOR parser for Python

Reverse Engineering notes on the Dxingtek/Keytech(?) WiFi@SDCF card

Pythonic 6502 Assembler: An experimental alternative to traditional assemblers.

agent skill to facilitate runtime linux kernel patching

A python3 RC4 implementation that doesn't suck. (i.e. it's actually binary-safe...)

magically import magic number constants

An experimental implementation of bitsliced aes in pure python. Quite possibly the fastest pure-python AES implementation on the planet.

My experiments in understanding AES, Whitebox AES, and related attacks

The World, according to Donald Trump

Preview Scratch projects inside vscode, with live reload.

A git mirror of iPodWizard: https://sourceforge.net/projects/ipodwizard/

Modern cryptography primitives implemented in Scratch, via Boiga

a simple script to simulate random "cosmic ray" memory errors against a linux process

test suite for atproto-flavour merkle search tree ops

code-golfed curl-like powered by kernel-mode crypto, with no security

An abstract implementation of a Merkle Search Tree, structurally compatible with ATProto's instantiation

A minimum-viable atproto feed genedator

a toy bittorrent client

A Python library for wrangling atproto-flavoured Merkle Search Trees

mt6765 little-kernel from Mediatek

Tools for manipulating classic ipod firmware images etc.

Distributed hash collision search tool

Example code from my blog post of the same title

An extremely bare-bones Python3 WireGuard client.

research-grade nintendo switch emulator-like thing

rsyscall is a dirty hack that allows you to execute syscalls in the context of another Linux process. M̶a̶y̶ Will explode your kernel.

`mp4decrypt` CLI utility implemented using MP4Box.js

[WIP] bagel is a Binary age aLternative - mostly the same as age but with a binary header format.

Scripts for datamining the Beatstar mobile game

Yet another telnet honeypot.

WIP

Adding optical digital audio output to classic iPods

Spawn a reverse TCP shell in the context of another Linux process

DAG-SQLite is an SQLite-based represention of the IPLD Data Model

A repo to keep track of all the useful/hacky/cursed scripts and one-liners I write

A very incomplete, incompatible, and insecure implementation of RFC4253

A simple CHIP-8 Emulator with a GTK+ frontend

Test data for benchmarking dag-cbor decoders and encoders

A6 checkm8 exploit with checkra1n 0.1337 method. (ported to linux/libusb)

A website that you wouldn't steal

A program that prints "Hello World!" by magic, with a single memcpy.

server/client protocol for remotely manipulating a "backdoored" linux system

resemblance to any other game is purely coincidental

Go implementation of Rateless IBLTs. (with additional security hardening)

A very simple WebExtension to prevent imgur from preventing you from viewing images directly.

pwnat punches holes in firewalls and NATs allowing any numbers of clients behind NATs to directly connect to a server behind a different NAT using a newly developed technique with no 3rd party, port forwarding, DMZ or spoofing

POCs for CVE-2017-13672 (OOB read in VGA Cirrus QEMU driver, causing DoS)

My personal shellcode collection.

A rather inefficient GIF encoder, in python.

FTP Server for 3DS

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

The Merkle Merge Tree (MMT) data structure implements an insert-only multiset supporting exclusion proofs

I have taken all of the challenges from Protostar - https://exploit-exercises.com/protostar/- and compiled them for the ARM architecture.

Ideas for improving efficiency of the atproto "firehose" mechanism, without making any sacrifices

A toy implementation of ML-KEM, aka Kyber, based on the current FIPS 203 draft

My attempts to understand/replicate existing attacks on hash functions (mostly collisions)

an (unfinished) TLSv1.3 client in pure python, hand-rolled from first principles.

Yet another x86_64 optimising Brainf*ck JIT compiler.

Repository of various public white-box cryptographic implementations and their practical attacks.

Documentation and code for my 6502 SBC

Yet another unnamed operating system project.

A very very WIP type-2 hypervisor in Rust, which uses the Linux KVM API.

vte terminal widget

A CHIP-8 emulator in C++

Flutter Mobile Application Reverse Engineering Tool

Atmosphère is a work-in-progress customized firmware for the Nintendo Switch.

port of the remake of the 2010 google doodle for desktop, mobile, PS Vita, 3DS Tizen, and others, too.

A collection of example projects and scripts for atproto development.

Browse AtProto repositories

Social networking technology created by Bluesky

This repo, apparently written by AI, contains root LPE in its default config

code I wrote a long time ago

pure-python parser for sqlite3 database files. non-WAL only. this is a toy.

A few years ago I set out to extract the GID key from the S5L8720 (aka iPod Touch 2g). I gave up, but I want to resurrect my efforts, with proper notes this time.

a collection of bitmap fonts pulled from various demoscene archives over the years

A toy implementation of SLH-DSA aka FIPS 205 aka SPHINCS+

Alias `install` to `pip install`

mt6765 preLoader from Mediatek

A GitHub mirror of the source code from https://cr.yp.to/ecdh.html (https://cr.yp.to/ecdh/curve25519-20050915.tar.gz)

Reverse engineering the https://pack.ac/ file format

A compendium of absurd open-source licenses.

Unofficial webOS TV homebrew store.

This is our helpful if snarky bot

An improved version of my older project "branflakes", an optimising brainfuck compiler.

Rust friendly bindings to *nix APIs

The fastest fizzbuzz in the universe.

Simple terminal image viewer written in Rust.

Renders a random PCB pattern using HTML5 canvas.

No description.

Scratch 3.0 as a self-contained desktop application

No description.

Random Cardiff uni CompSci coursework solutions, of varying quality.

CSS Gradient Fixer

A chip8 emulator that translates programs into a giant ROP payload. Not my best idea...

Useful generation scripts and precomputed LUTs useful for performing frequency analysis on English text.

CSI style "Zoom and Enhance" with Google Maps

No description.

No description.

Public Ledger of Credentials: a cryptographic, strongly-consistent, and recoverable DID method

fast CBOR with a focus on strictness

Close-to-mainline kernel for BCM21664/BCM23550 devices | Very WIP, not yet usable

Go source code for Bluesky's atproto services.

Keys and certificates for YubiKeys, written in Go

Python bindings for the ed25519-dalek RUST crate

Experiments in atproto indexing

Notes about my TDS684A oscilloscope

No description.

No description.

Python implementation of Bluesky PDS and AT Protocol, including repo, MST, and sync XRPC methods

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.

No description.

rabbit r1 kernel source

The Bluesky Social application for Web, iOS, and Android

prototype (with placeholder name (maybe))

No description.

MTK reverse engineering and flash tool

:partly_sunny: The right way to check the weather

Pack

Libraries needed for SCL

simd-like operations using python ints

A Go implementation of the quantum-resistant key encapsulation method ML-KEM (formerly known as Kyber).

The repository for high quality TypeScript type definitions.

No description.

Nintendo Switch encryption key derivation bare metal RCM payload

InterPlanetary Linked Data

Hash collisions and exploitations

The xx file format. Turn your hex dumps into art, then into binary data.

A multiplatform CHIP-8 emulator done in SDL 2. Implements all the opcodes for CHIP and SCHIP specifications.

Multiplatform CHIP-8 and Super-CHIP emulator

A self-contained cryptographic library for Python

No description.

Discord bot for handling ReSwitched moderation tasks and such, (n)ext-(g)en rewrite of Robocop

a fast and light image viewer

Datamining scripts and information for the Gudetama Tap! mobile app.

UI toolkit for iPodLinux applications

No description.

Python implementation of LZNT1 compression/decompression

No description.

Generate python ctypes classes from C headers. Requires LLVM clang

The Python programming language

FreeBSD src tree

A toy implementation of RSA in Rust (WIP)

Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.

eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee

Yet Another Cryptopals solution repo. Implemented in modern-ish python3. A mixture of procedural and functional coding styles. But no OO! :P

Instructions for assembling, running, and debugging the MASM syntax assembly featured in the CM1205 module at Cardiff University

Just playing with parsing and evaluating mathematical expressions in C

Open source toolchain for Switch development

Cross-platform, sophisticated frontend for the libretro API. Licensed GPLv3.

CHIP-8 emulator written in 64 bits Assembly (Linux)

Simulate 6502-based microcomputer systems in Python.

No description.

Coolest Gradient Hues and Swatches by UVdesk

A robotics project for Cardiff Computing Club

Generate a coursework coversheet as required by Cardiff University, with a single command.

No description.

Yet another "Asteroids" clone, with Three.js

An assembler/disassembler/simulator for the microcontroller used in OCR A2 Electronics.