31-day current streak·31-day longest streak
Aloha mai kākou I'm Zion Leonahenahe Basque or rather mahaloz. I'm an Assistant Professor at the University of Georgia. My research area is broadly binary analysis, but my favorite topic…
Aloha mai kākou
I'm Zion Leonahenahe Basque or rather mahaloz. I'm an Assistant Professor at the University of Georgia.
My research area is broadly binary analysis, but my favorite topic is decompilation. You can find my publications on Google Scholar and my technical blog at mahaloz.re.
I’m also a previous co-captain of the hacking team Shellphish. Most of the code you'll find here is reverse engineering tools, research projects made public, or CTF education material.
Here is a pick of my favorite projects:
- Decompilation: 🔬
- Reversing: ⏪
- Debugging: 🐟
- Education: 📖
| Stars | T | Description |
|--|--|--|
|!GitHub stars| 🔬 | sailr-eval is a decompiler-quality evaluation pipeline from the USENIX 2024 paper SAILR. It also contains info on finding artifacts for the SAILR algorithm.|
|!GitHub stars| 🔬 | angr is a binary analysis framework used for a variety of tasks, including decompilation. I'm one of the core developers of the home-rolled decompiler. I focus on making the generated code better.|
| !GitHub stars| 🐟 | decomp2dbg is an addon to GDB to sync decompilation, symbols, and metadata from a decompiler on-the-fly for the enhanced debugging of binaries.|
|!GitHub stars| 🔬 | DAILA is a decompiler-agnostic plugin for integrating AI into decompilation. Currently, OpenAI and the VarBERT models are supported for various reversing tasks, like variable renaming.|
|!GitHub stars| ⏪ | BinSync is a decompiler-agnostic reversing plugin for cross-decompiler collaboration, built on git. Gone are the days of being unable to sync structs and types between different decompilers!|
|!GitHub stars| ⏪ | angr-management is the angr team self-rolled decompiler UI, which includes many plugins for interacting with the binary on multiple levels. Try it out today!|
|!GitHub stars| 📖 | 'ike is a prerequisite handbook for binary analysis written as a guide to prepare people new to computer science for pwn.college, an automated binary exploitation teaching platform. Full site at ike.mahaloz.re.|
If you want to get ahold of me, you can email me at [email protected] or find me on Discord: @mahaloz and Twitter: @mahal0z.
-
decomp2dbg
A plugin to introduce interactive symbols into your debugger from your decompiler
Python ★ 810 19d agoExplain → -
DAILA
A decompiler-agnostic plugin for interacting with AI in your decompiler. GPT-4, Claude, and local models supported!
Python ★ 704 19d agoExplain → -
decompilation-wiki
The Decompilation Wiki: info on all things decompilation
★ 245 2mo agoExplain → -
sailr-eval
The SAILR paper's evaluation pipline for measuring the quality of decompilation
Python ★ 120 1y agoExplain → -
ctf-wiki-en
A full English version of the popular ctf-wiki
HTML ★ 115 2y agoExplain → -
ike
'Ike: A binary exploitation and reversing handbook.
Shell ★ 94 11mo agoExplain → -
cfgutils
Utility library for analysis of Control Flow Graphs, home to the Basque CFGED algorithm.
Python ★ 35 6mo agoExplain → -
angr-sailr ⑂
A frozen version of angr for the SAILR paper
Python ★ 17 1y agoExplain → -
pyjoern
No description.
Python ★ 16 1y agoExplain → -
dec-synergy-study
The infrastructure for the NDSS 2026 work Decompiling the Synergy
C ★ 9 11d agoExplain → -
d2d-ghidra-plugin ▣
Ghidra support for decomp2dbg
Java ★ 6 3y agoExplain → -
objgraph
Convert an objdump output into a CFG via Binary Ninja
Python ★ 6 4y agoExplain → -
talks
A repo for holding talk artifacts, including a summary, slides, and demo PoCs
C ★ 4 5d agoExplain → -
DISARM
A POC Exploit to disarm open-source drones in your area
C ★ 4 7y agoExplain → -
mahaloz.re
My hacking blog: https://mahaloz.re
SCSS ★ 4 1y agoExplain → -
environment
All my dotfiles including install scripts, dockerfiles, and small explinations
Python ★ 3 1y agoExplain → -
binsync-ghidra-plugin ▣
No description.
Java ★ 3 3y agoExplain → -
cse539-code
No description.
C++ ★ 3 3y agoExplain → -
static-binaries
A repo of static-binaries useful for pwn or embedded deployment
★ 2 3y agoExplain → -
uh-workshop-2024
The pwn.college workshop at UH
★ 2 1y agoExplain → -
mahaloz_lib
A Python library for my often reused CTF scripts, packages, and configs (including dotfiles).
Python ★ 2 2y agoExplain → -
top4grep ⑂
find relevant security papers published in the top-4 conferences (S&P, USENIX, CCS, NDSS)
Python ★ 2 1y agoExplain → -
nanomips
NanoMIPS learning examples.
Python ★ 2 6y agoExplain → -
bin-ripper
A binary-only fuzzer interface for CTFs
★ 2 5y agoExplain → -
small-gbas
Some small fuzz-interesting GBAs along with compile tools
C ★ 2 5y agoExplain → -
vulnet-ctf-challenge
The Tulnet 2026 Login Vuln Challenge
Dockerfile ★ 1 3mo agoExplain → -
cse194-s25
CSE194: Hacking History and Culture (Spring 2025) class site and documents
HTML ★ 1 1y agoExplain → -
sourcegraph ⑂
Universal code search (self-hosted)
★ 1 4y agoExplain → -
mattermost-server ⑂
Mattermost is an open source platform for secure collaboration across the entire software development lifecycle.
★ 1 4y agoExplain → -
cockroach ⑂
CockroachDB - the open source, cloud-native distributed SQL database.
★ 1 4y agoExplain → -
fragattacks ⑂
No description.
C ★ 1 4y agoExplain → -
pilosa ⑂
Pilosa is an open source, distributed bitmap index that dramatically accelerates queries across multiple, massive data sets.
★ 1 4y agoExplain → -
ret-sync ⑂
ret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2/x64dbg) with IDA/Ghidra/Binary Ninja disassemblers.
★ 1 4y agoExplain → -
hopulib
A library containing utilities for reversing and crypto
Python ★ 1 4y agoExplain → -
gef ⑂
GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging features for exploit developers & reverse engineers ☢
Python ★ 1 2y agoExplain → -
dojo ⑂
Infrastructure powering pwn.college dojo
Python ★ 1 1y agoExplain → -
wargame-nexus ⑂
An sorted and updated list of security wargame sites.
★ 1 6y agoExplain → -
netgear-pwnagent
An exploit PoC for CVE-2023-24749, aka PwnAgent
HTML ★ 1 3y agoExplain → -
old_mahaloz.re ▣
No description.
JavaScript ★ 1 5y agoExplain → -
Pihulu
A simple fuzzer created by an even simpiler Hawaiian
Python ★ 1 8y agoExplain → -
mahaloz
No description.
★ 0 6d agoExplain → -
random-files
No description.
★ 0 1mo agoExplain → -
zionbasque.com
New website host repo
CSS ★ 0 2mo agoExplain → -
mineshop
A small CTF challenge
JavaScript ★ 0 4mo agoExplain → -
asphyxia-core ⑂
Asphyxia CORE
TypeScript ★ 0 4mo agoExplain → -
pwndbg ⑂
Exploit Development and Reverse Engineering with GDB & LLDB Made Easy
★ 0 7mo agoExplain → -
test-dojo
Test dojo
Dockerfile ★ 0 8mo agoExplain → -
example.bsproj
No description.
★ 0 8mo agoExplain → -
example2.bsproj
No description.
★ 0 11mo agoExplain → -
test.bsproj
No description.
★ 0 11mo agoExplain → -
sec-deadlines.github.io ⑂
Deadline countdowns for academic conferences in Security and Privacy
★ 0 1y agoExplain → -
cse194-irc-dojo ⑂
CSE194 Copy of the IRC Dojo
Python ★ 0 1y agoExplain → -
fauxware_premade_test
Test Stutfasdfasd
★ 0 1y agoExplain → -
another_example.bsproj
No description.
★ 0 1y agoExplain → -
Hackers-1995-ARFilter ⑂
No description.
★ 0 1y agoExplain → -
windows-malware.bsproj
An demo repo on Window Malware for BinSync (new visualization feature)
★ 0 1y agoExplain → -
tinyusdz ⑂
Tiny, dependency-free USDZ/USDA/USDC library written in C++14
★ 0 4y agoExplain → -
challenge6.bsproj
No description.
★ 0 2y agoExplain → -
tempe-covid-analysis
A project to directly parse Tempe's ArcGIS COVID Wastewater data and infer information about it
Python ★ 0 2y agoExplain → -
chicago.bsproj
No description.
★ 0 3y agoExplain → -
mc_dotfiles
A collection of my mods, shaderpacks, and resources packs to make Minecraft good
Python ★ 0 2y agoExplain → -
my_test_proj
No description.
★ 0 3y agoExplain → -
kalamar-cyclechaster
kalamar-cyclechaster
★ 0 3y agoExplain → -
Script-Kiddy ▣
A script dedicated to assisting all script kiddys in automating CSE310 assignments
Shell ★ 0 7y agoExplain → -
driller-afl ⑂ ▣
A version of AFL tailored for Driller's use in analyzing CGC binaries.
C ★ 0 7y agoExplain → -
hoolaulea ▣
This is the HTML/CSS for the Ho'olaulea Web Application
HTML ★ 0 8y agoExplain → -
GMatch4py ⑂
A graph matching library for Python
Cython ★ 0 3y agoExplain → -
rpi-3-emulator
Raspberry Pi 3 QEMU Emulator for simple IO Inferface
Shell ★ 0 6y agoExplain → -
Noob-Pwner-Kit
A kit dedicated to assisting filthy casual pwners like myself.
★ 0 7y agoExplain → -
ctfd-writeups ⑂
A CTFd plugin for allowing CTF participants to submit and view write-ups for solved challenges
Python ★ 0 3y agoExplain → -
bs-0ctf22-vintage
No description.
★ 0 3y agoExplain → -
fast-joern ⑂
JOERN fork with optimizations for speed
Scala ★ 0 3y agoExplain → -
Lilu ⑂
Arbitrary kext and process patching on macOS
★ 0 4y agoExplain → -
pint ⑂
Prometheus rule linter
★ 0 4y agoExplain → -
podcast ⑂
iTunes and RSS 2.0 Podcast Generator in Golang
Go ★ 0 4y agoExplain → -
libgphoto2 ⑂
The libgphoto2 camera access and control library.
C ★ 0 4y agoExplain → -
lzbench ⑂
lzbench is an in-memory benchmark of open-source LZ77/LZSS/LZMA compressors
C ★ 0 4y agoExplain → -
rp ⑂
rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM binaries.
C++ ★ 0 4y agoExplain → -
go-zero ⑂
A web and RPC framework written in Go. It's born to ensure the stability of the busy sites with resilient design. Builtin goctl greatly improves the development productivity.
Go ★ 0 4y agoExplain → -
opa ⑂
An open source, general-purpose policy engine.
Go ★ 0 4y agoExplain → -
lotus ⑂
Implementation of the Filecoin protocol, written in Go
★ 0 4y agoExplain → -
actionlint ⑂
:octocat: Static checker for GitHub Actions workflow files
★ 0 4y agoExplain → -
skipper ⑂
An HTTP router and reverse proxy for service composition, including use cases like Kubernetes Ingress
★ 0 4y agoExplain → -
client ⑂
Keybase Go Library, Client, Service, OS X, iOS, Android, Electron
★ 0 4y agoExplain → -
FLIF ⑂
Free Lossless Image Format
★ 0 4y agoExplain → -
dynarmic ⑂
An ARM dynamic recompiler.
★ 0 4y agoExplain → -
mongo-c-driver ⑂
A high-performance MongoDB driver for C
★ 0 4y agoExplain → -
mavlink ⑂
Marshalling / communication library for drones.
CMake ★ 0 4y agoExplain → -
fmt ⑂
A modern formatting library
★ 0 4y agoExplain → -
zcash ⑂
Zcash - Internet Money
★ 0 4y agoExplain → -
asn1tools ⑂
ASN.1 parsing, encoding and decoding.
★ 0 4y agoExplain → -
dolphin ⑂
Dolphin is a GameCube / Wii emulator, allowing you to play games for these two platforms on PC with improvements.
★ 0 4y agoExplain → -
asn1c ⑂
The ASN.1 Compiler
★ 0 4y agoExplain → -
libfido2 ⑂
Provides library functionality for FIDO2, including communication with a device over USB or NFC.
★ 0 4y agoExplain → -
libmobi ⑂
C library for handling Kindle (MOBI) formats of ebook documents
★ 0 4y agoExplain → -
libxmp ⑂
Libxmp is a library that renders module files to PCM data.
★ 0 4y agoExplain → -
phuzzer ⑂
The new phuzzing framework!
Python ★ 0 4y agoExplain → -
dreamland
No description.
★ 0 4y agoExplain → -
sync_test
No description.
★ 0 4y agoExplain → -
ctf-challenges
A public repository of challenges I've made over the years
C ★ 0 4y agoExplain → -
Re-cloaking-Maliciousness
No description.
★ 0 5y agoExplain → -
readme-with-video ⑂
No description.
★ 0 5y agoExplain → -
pyqode.qt ⑂
A shim that provides support for PyQt4, PyQt5 and PySide
★ 0 8y agoExplain → -
ctf_files
No description.
GDScript ★ 0 4y agoExplain → -
binsync_example_repo
An example repo to show off how a BinSync Repo works
★ 0 4y agoExplain → -
sync_test_ida
No description.
★ 0 5y agoExplain → -
mgba ⑂
mGBA Game Boy Advance Emulator
★ 0 5y agoExplain → -
mavlink-afl-harness
A Harness for MavLink built for AFL
C++ ★ 0 5y agoExplain → -
jekyll-theme-chirpy ⑂
A minimal, sidebar, responsive web design Jekyll theme, focusing on text presentation.
★ 0 5y agoExplain → -
human-trafficking-id ⑂
Get Instagram posts/profile/hashtag data without using Instagram API
Python ★ 0 6y agoExplain → -
ctf-tools ⑂
Some setup scripts for security research tools.
★ 0 6y agoExplain → -
ml-docker
A customized docker container including common machine learning libraries and dependencies.
Dockerfile ★ 0 7y agoExplain → -
Filler
Testing framework for determining the effectiveness of adversarial code on Driller (AFL + SE)
Roff ★ 0 7y agoExplain →
No repos match these filters.