DeepZero is an automated vulnerability research pipeline engine, primarily targeting Windows kernel driver (BYOVD) analysis. It provides a highly concurrent, resumable orchestration framework where pipelines are defined declaratively in YAML. The engine supports stages: ingest, map (parallel analysis), reduce (aggregation), and bulk_map, with built-in fault tolerance, atomic state persistence, and live progress dashboards. It integrates external tools like Ghidra (headless decompilation), Semgrep (static analysis), LIEF (PE parsing), and LLM backends (LiteLLM, Claude Code) for exploitability assessment. The repository includes a full reference pipeline (loldrivers) and multiple language documentation sites. While primarily an application framework, it has strong data research characteristics due to its focus on binary corpus analysis and heuristic/AI assessment.
This repository contains purely documentation describing a zero-click iOS exploit chain targeting CVE-2025-31200 (CoreAudio heap corruption) and CVE-2025-31201 (AppleBCMWLAN kernel escalation), with an additional unpatched hardware vector via BCM4387 coexistence SRAM. The content is limited to two Markdown files: a detailed technical walkthrough (Attack Chain Flow.md) and a summary README. There is no executable code, data, scripts, or configuration present. The repository serves as a research write-up detailing the attack flow, delivery mechanism, post-exploitation behavior, and mitigation recommendations. It does not contain any reusable data assets, pipelines, or analytical components since it lacks ingested data, transformation logic, or models.