awesome-reverse-engineering-and-malware-analysis

Awesome Reverse Engineering & Malware Analysis A map of reverse engineering and malware analysis that's actually been read. Every link was opened and checked before it went in, and it gets pulled the moment it rots - no dead pages, no one-word notes, no "great resource!" filler. unpacked covers a...

Awesome-Fuzzing

Welcome to Awesome Fuzzing A curated list of fuzzing resources Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on for learning Fuzzing and initial phases of Exploit Development like root cause analysis. Contents Books Courses Free Paid Videos NYU...

AI_HACKING

AIHACKING Collection of CVEwork on tenserflow binary pwning it FOR CVE202223591WHICH IS STILL UNDER WORK I NEED TO FIGURE OUT HOW TO TURN BACK JSON TO PROTOBUF AND THAN DO with tf.io.gfile.GFile'test.pb', 'rb' as f: graphdef = tf.compat.v1.GraphDef print"aiciaaaaaaaaaaaaaa" printgraphdef...

how2heap

Educational Heap Exploitation This repo is for learning various heap exploitation techniques. We use Ubuntu's Libc releases as the gold-standard. Each technique is verified to work on corresponding Ubuntu releases. You can run apt source libc6 to download the source code of the Libc you are using...

gef

GEF pronounced ʤɛf - "Jeff" is a set of commands for x86/64, ARM, MIPS, PowerPC and SPARC to assist exploit developers and reverse-engineers when using old school GDB. It provides additional features to GDB using the Python API to assist during the process of dynamic analysis and exploit...

cve-2026-40369-exploit

这里参考了https://voidsec.com/cve-2026-40369-browser-sandbox-escape/, 思路与https://github.com/orinimron123/CVE-2026-40369-EXPLOIT有较大差异, 并且没看到他们有公开的exp, 所以记录了一下...

ronin

ronin Website Source Issues Documentation Discord | Mastodon Description Ronin is a free and Open Source Ruby toolkit for security research and development. Ronin contains many different CLI commands and Ruby libraries for a variety of security tasks, such as encoding/decoding data, filter...

exploitgym

ExploitGym ExploitGym is a large-scale, realistic benchmark built from real-world vulnerabilities across userspace programs, Google's V8 engine, and the Linux kernel, designed to evaluate AI agents' ability to develop exploits. Quick start root@kitploit: 1. Python deps uv sync --extra proxy 2...

ntoskrnl-metadata

ntoskrnl-metadata An IDA Python script for extracting critical kernel metadata from Windows ntoskrnl.exe binaries. This tool automatically extracts function RVAs and EPROCESS structure offsets required for developing exploits targeting CVE-2026-40369 and other kernel vulnerabilities. Purpose This...

pwndbg

pwndbg pwndbg /paʊnˈdiˌbʌɡ/ は、デバッグをより快適にするGDBおよびLLDBプラグインで、低レベルソフトウェア開発者、ハードウェアハッカー、リバースエンジニア、エクスプロイト開発者が必要とする機能に焦点を当てています。 豊富な機能を備えています。Features page と CHEATSHEET をご覧ください（印刷も自由です！）。ご質問があれば、ドキュメント を読むか、Discordサーバー でお尋ねください。 Pwndbgの開発を加速させたい、または講演を依頼したいですか？ スポンサーになる！ なぜ？...

CVE-2018-4416-exploit

はじめに :PROPERTIES: :CUSTOMID: preface :END: はい、バイナリセキュリティは /heap/ や /stack/ だけではありません。通常のCTFチャレンジ以外にも、まだまだ発見すべきことがたくさんあります。ブラウザ、仮想マシン、カーネルはいずれもバイナリセキュリティにおいて重要な役割を果たします。そして私はまずブラウザから学ぶことにしました。 比較的簡単なものとして /WebKit/ を選びました。（ChakraCore のほうが簡単かもしれませんが、LoL。でも Microsoft...

CVE-2022-22947-exp

CVE-2022-22947-exp Reproduced the CVE-2022-22947 vulnerability, wrote an exploit exp Later, based on an article by a senior, wrote an exp for memory horse injection, for reference only...

Exploit-Development

Exploit-Development Weaponized Exploit and Proof of Concepts PoC...

heap-viewer

HeapViewer Un plugin de IDA Pro para examinar el heap, enfocado en el desarrollo de exploits. Actualmente soporta la implementación malloc de glibc ptmalloc2. Ganador del tercer lugar del concurso de plugins Hex-Rays 2018 Requisitos IDA Pro = 7.0 Probado en glibc 2.23 = 2.26 GraphView para listas...

pythem

pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...

twiga

Twiga A tool that enumerates Android devices for information useful in understanding its internals and for exploit development. It supports android 4.2 to android 7.1.1 Requirements The most current ADB must be in your path and fully functional The report name must not have any whitespace...

twiga

Twiga Una herramienta que enumera dispositivos Android para obtener información útil para comprender su funcionamiento interno y para el desarrollo de exploits. Soporta android 4.2 a android 7.1.1 Requisitos La versión más actual de ADB debe estar en tu PATH y completamente funcional El nombre de...

Ponce

Ponce Ponce pronunciado 'poN θe pon-they es un plugin de IDA Pro que brinda a los usuarios la capacidad de realizar análisis de contaminación taint analysis y ejecución simbólica sobre binarios de forma fácil e intuitiva. Con Ponce estás a un clic de obtener todo el poder de la ejecución simbólic...

gef

GEF（発音: ʤɛf - "Jeff"）は、x86/64、ARM、MIPS、PowerPC、SPARC向けのコマンド群で、旧来のGDBを使用するエクスプロイト開発者やリバースエンジニアを支援します。Python APIを使用してGDBに追加機能を提供し、動的解析やエクスプロイト開発のプロセスを支援します。アプリケーション開発者にとっても、GEFが通常のGDBの難解さを大幅に解消し、従来のコマンドの繰り返しを避け、デバッグ実行時に関連情報を引き出すため、恩恵があります。 クイックセットアップ まず、GDB...

CVE-2019-0708-PoC-Hitting-Path

CVE-2019-0708-PoC-Hitting-Path Really Really Bad, don't judge this code hahaha it's terrible It's only hitting vulnerable path in termdd.sys!!! NOT DOS Tested only on Windows XP Sp3 x86, Windows 7 will need negotiation part probably so it won't work I hope that work at all Maybe it will be useful...