OffensiveVBA

OffensiveVBA In preparation for a VBS AV Evasion Stream/Video I was doing some research for Office Macro code execution methods and evasion techniques. The list got longer and longer and I found no central place for offensive VBA templates - so this repo can be used for such. It is very far away...

hcon2026hwctf

Hardware Hacking CTF hcon2026hwctf If you’re into hardware CTFs, here’s the first public challenge from HC0N CTF 2026 featuring RISC-V RP2350 exploitation challenges low level We’ve tried to make the challenge not too elitist or difficult, so that the hundreds of conference participants have a...

honeyprompt

honeyprompt Introducing honeyprompt, an LLM-first deception framework made by/for web developers. The personal passion project of @alectrocute. Supports all major cloud and local LLM providers. SSH, HTTP, TLS, TCP, telnet and more. It ships as a small container and a single static binary and keep...

SNOWCRASH

SNOWCRASH A polyglot payload generator Introduction SNOWCRASH creates a script that can be launched on both Linux and Windows machines. Payload selected by the user in this case combined Bash and Powershell code is embedded into a single polyglot template, which is platform-agnostic. There are fe...

ghidrecomp

Ghidrecomp - Command Line Ghidra Decompiler About This Python command line tool decompiles all functions of a binary and writes them to a directory in separate C files: flowchart LR afilename -- bghidrecomp a2Symbol Server -- b b -- eGhidra Project Files b -- output subgraph output subgraph...

ghidrecomp

Ghidrecomp - Command Line Ghidra Decompiler 소개 이 Python 명령줄 도구는 바이너리의 모든 함수를 디컴파일하여 개별 C 파일로 디렉터리에 작성합니다:mermaid flowchart LR afilename -- bghidrecomp a2Symbol Server -- b b -- eGhidra Project Files b -- output subgraph output subgraph decompilations direction LR ifunc1.c hfunc2.c ffuncB.c end...

AlanFramework

Alan Framework Alan Framework is a post-exploitation framework useful during red-team activities. If you find my tool useful, please consider tosponsor me. ⚠⚠⚠ Disclaimer ⚠⚠⚠ The creation of this kind of software has always caused controversies. If you're wondering why I decided to create this...

pivotool

pivotool pivotool in ethical hacking, as expected, is a simple tool written in bash that could help you in the post exploitation phase to pivot to other systems. Description Pivotool is a tool that does not pretend to revolutionize the post exploitation phase of a penetration test, but it can hel...

covert-tube

covert-tube A program to control systems remotely by uploading videos to Youtube using Python to create the videos and the listener, emulating some malware I was reading about. It allows to create videos with frames formed of simple text, QR codes with cleartext or QR codes using AES encryption...

AlphaGolang

AlphaGolang by Juan Andres Guerrero-Saade JAG-S @ SentinelLabs Description: AlphaGolang is a collection of IDAPython scripts to help malware reverse engineers master Go binaries. The idea is to break the scripts into concrete steps, thus avoiding brittle monolithic scripts, and mimicking the...

ropium

About ROPium ex-ROPGenerator is a library/tool that makes ROP-exploits easy. It automatically extracts and analyses gadgets from binaries and lets you find ROP-chains with semantic queries. ROPium supports X86 and X64 architectures, soon to be extended with ARM. Key features: Effortless : ROPium...

ofrak

OFRAK OFRAKOpen Firmware Reverse Analysis Konsole은 바이너리 분석 및 수정 플랫폼입니다. OFRAK은 다음과 같은 기능을 결합합니다: 다양한 바이너리 형식을 식별 하고 언팩 합니다 현장 검증된 리버스 엔지니어링 도구로 언팩된 바이너리를 분석 합니다 강력한 패치 전략으로 바이너리를 수정 하고 리팩 합니다 OFRAK은 사용자 공간 실행 파일 외에도 다양한 임베디드 펌웨어 파일 형식을 지원합니다. 예를 들어: 압축 파일 시스템 압축 및 체크섬된 펌웨어 부트로더 RTOS/OS 커널 OFRAK은...

bytesrevealer

https://bytesrevealer.online/ VULNEX https://www.vulnex.com/ Bytes Revealer Version: 0.4 Bytes Revealer is a powerful reverse engineering and binary analysis tool designed for security researchers, forensic analysts, and developers. With features like hex view, visual representation, string...

LinPwn

LinPwn About LinPwn is a interactive tool created to assist you in post exploitation enumeration and privilege escalation. Connection Set your IP and port you want it to connect to in the Connection class. Place the LinPwn binary on the target machine. Run nc -lvp PORT on your machine and then ru...

uniFuzzer

uniFuzzer uniFuzzer is a fuzzing tool for closed-source binaries based on Unicorn and LibFuzzer. Currently it supports fuzzing 32-bits LSB ELF files on ARM/MIPS, which are usually seen in IoT devices. 中文介绍 Features very little hack and easy to build can target any specified function or code snipp...

CVE-2021-21985_PoC

CVE-2021-21985 취약한 코드 CLASS/METHODs 사용 가능, PoC 목적의 작은 샘플: com.vmware.vsan.client.services.capability.VsanCapabilityProvider ../snip getClusterCapabilityData getHostCapabilityData getHostsCapabilitiyData getIsDeduplicationSupported getIsEncryptionSupported getIsLocalDataProtectionSupportedOnVc...

Venom

Venom - A Multi-hop Proxy for Penetration Testers 简体中文 ｜ English Venom is a multi-hop proxy tool developed for penetration testers using Go. You can use venom to easily proxy network traffic to a multi-layer intranet, and easily manage intranet nodes. This tool is limited to security research and...

CVE-2026-23111-POC-noddlenpottato

CVE-2026-23111 — noddlenpottato nftables catchall UAF → 비특권 LPE. 대부분의 5.10—6.18 리눅스 커널에서 일반 사용자가 root 권한을 획득합니다. 타깃 커널에 자동으로 적응합니다 — struct 오프셋을 탐지하고, 심볼을 해석하고, ROP 가젯을 찾고, slab 캐시를 결정하며, 맞춤형 익스플로잇을 생성해 컴파일하고 실행합니다. 익스플로잇 체인 개요 slab 재확보 전략 취약점 nftmapcatchallactivatenet/netfilter/nftablesapi.c에서 역...

mmiotic

mmiotic MMIO 타이밍을 탐구하는 도구 — 임의의 물리 주소를 타이밍하고, 레이턴시로부터 하드웨어를 분석한다. 하드웨어 리버스 엔지니어링, 하이퍼바이저 핑거프린팅, 장치 활동의 사이드 채널링, 레지스터 특성 규명, 악성 트리거 보정, 그리고 터무니없이 긴 머신 명령어 제작에 의외로 유용하다. 예제 메모리 범위 리버스 엔지니어링 물리 메모리의 첫 1MB는 구조가 이미 잘 알려져 있더라도 시작하기 쉬운 예제다. 레이턴시 경계를 통해 보고된 레이아웃에 의존하지 않고 주소 공간을 분할할 수 있다. 1. 간단한 레이턴시 스캔으로...

CVE-2023-37941

SupersetのデフォルトキャッシュにおけるPickle RCEの悪用 情報 著者 Dinis Cruz プロジェクト Superset 説明 Apache Supersetはキャッシュのためのさまざまなオプションを提供しており、そのすべてはFlask-Cachingに基づいています。組み込みキャッシュが提供されており、値をシリアライズして後で取得できるようにします。このシリアライゼーションと取得はPickleを使用して行われ、Pythonオブジェクトのデシリアライゼーションを可能にし、その結果コードの実行が可能になります。...