Skip to content
View Billy-Ellis's full-sized avatar
1.2k followers · 71 following

Achievements

Achievement: Arctic Code Vault ContributorAchievement: Pull SharkAchievement: Starstruckx3

Achievements

Achievement: Arctic Code Vault ContributorAchievement: Pull SharkAchievement: Starstruckx3

Organizations

@ZygoSec

Block or report Billy-Ellis

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Billy-Ellis/README.md

Hi there 👋

I'm Billy, an iOS security researcher based in London, UK.

I'm interested in all-things security - from low-level programming, to reverse engineering and exploit development. Here you will find various tools and random projects I've built over the past few years. Hopefully there's something here you'll find valuable!

Want to chat with me about one of my projects, or something else? You can reach me at billy@zygosec.com, or find me on:

🐦 Twitter

🎥 YouTube

📝 My blog

👨‍💻 My website

Pinned Loading

  1. Exploit-ChallengesExploit-ChallengesPublic

    A collection of vulnerable ARM binaries for practicing exploit development

    C 955 173

  2. exr-imageio-pocexr-imageio-pocPublic

    PoC for CVE-2026-28990, an ImageIO bug patched in iOS/macOS 26.5

    Python 46 6

  3. jitsploitationjitsploitationPublic

    iOS browser exploit for CVE-2020-9802, an old JIT bug.

    HTML 13

  4. framebuffer_writeframebuffer_writePublic

    A tool to write text to the iOS screen by directly modifying the pixel information in the framebuffer

    C 92 17

  5. aslr-kernel-patchaslr-kernel-patchPublic

    Tool to patch the ASLR slide generation in the kernel to disable user-land ASLR on 32-bit iOS

    C 32 4

  6. kobjectkobjectPublic

    A tool to pull C++ object names from kernel memory

    C 16 2