awesome-reverse-engineering-and-malware-analysis

Awesome Reverse Engineering & Malware Analysis A map of reverse engineering and malware analysis that's actually been read. Every link was opened and checked before it went in, and it gets pulled the moment it rots - no dead pages, no one-word notes, no "great resource!" filler. unpacked covers a...

gef

GEF pronounced ʤɛf - "Jeff" is a set of commands for x86/64, ARM, MIPS, PowerPC and SPARC to assist exploit developers and reverse-engineers when using old school GDB. It provides additional features to GDB using the Python API to assist during the process of dynamic analysis and exploit...

ronin

ronin Website Source Issues Documentation Discord | Mastodon Description Roninwebsite is a free and Open Source Ruby toolkit for security research and development. Ronin contains many different CLI commands and Ruby librariesronin-rb for a variety of security tasks, such as encoding/decoding data...

Ponce

Ponce Ponce pronounced 'poN θe pon-they is an IDA Pro plugin that provides users the ability to perform taint analysis and symbolic execution over binaries in an easy and intuitive fashion. With Ponce you are one click away from getting all the power from cutting edge symbolic execution. Entirely...

Awesome-Fuzzing

Welcome to Awesome Fuzzing A curated list of fuzzing resources Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on for learning Fuzzing and initial phases of Exploit Development like root cause analysis. Contents Books Courses Free Paid Videos NYU...

peda

peda PEDA - Python Exploit Development Assistance for GDB Key Features: Enhance the display of gdb: colorize and display disassembly codes, registers, memory information during debugging. Add commands to support debugging and exploit development for a full list of commands use peda help: aslr --...

heap-viewer

HeapViewer An IDA Pro plugin to examine the heap, focused on exploit development. Currently supports the glibc malloc implementation ptmalloc2. 3rd place winner of the 2018 Hex-Rays Plugin Contest Requirements IDA Pro = 7.0 Tested on glibc 2.23 = 2.26 GraphView for linked lists bins/tcache Struct...

pythem

pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...

twiga

Twiga A tool that enumerates Android devices for information useful in understanding its internals and for exploit development. It supports android 4.2 to android 7.1.1 Requirements The most current ADB must be in your path and fully functional The report name must not have any whitespace...

bst

Binary String Toolkit Summary The Binary String Toolkit or BST for short is a rather simple utility to convert binary strings to various formats suitable for inclusions in source codes, such as those used to develop exploits and Proof of Concepts in the security field. Features Convert and dump...

Exploit-Development-MCP

Exploit Development MCP Server An MCP Model Context Protocol...

CVE-2021-3156

CVE-2021-3156 CVE-2021-3156: Sudo heap overflow exploit for Debian 10 Vulnerability analysis and exploit development: https://syst3mfailure.io/sudo-heap-overflow Exploit designed for: Sudo: Version 1.8.27 1.8.27-1+deb10u1 Checksum sha256:...

Exploit-Development

Developed Exploits This repository will contain any exploit or proof of concept code I release publicly. In addition to this, I will include Metasploit Modules, and ported exploits. Metasploit Modules This directory will contain all Metasploit modules I've developed. Note that code within this...

CVE-2022-22947-exp

CVE-2022-22947-exp Reproduced the CVE-2022-22947 vulnerability, wrote an exploit exp Later, based on an article by a senior, wrote an exp for memory horse injection, for reference only...

cve-2026-40369-exploit

This references https://voidsec.com/cve-2026-40369-browser-sandbox-escape/, the approach differs significantly from https://github.com/orinimron123/CVE-2026-40369-EXPLOIT, and since I didn't see any public exp from them, I documented it...

CVE-2019-0708-RCE

CVE-2019-0708-RCE CVE-2019-0708-RCE We are working on a fully functional exploit join us https://discord.gg/4kc72bZ...

how2heap

Educational Heap Exploitation This repo is for learning various heap exploitation techniques. We use Ubuntu's Libc releases as the gold-standard. Each technique is verified to work on corresponding Ubuntu releases. You can run apt source libc6 to download the source code of the Libc you are using...

CVE-2025-5548

Vulnerability Analysis and Exploitation Methodology Author: Anas Rami Module 6: Vulnerabilities - Master in Cybersecurity Objective: Technical proposal on vulnerability analysis, exploit development, and approach to 0-days, documenting the laboratory environment and practical cases. 1...

CVE-2022-37969PoC

Contents General Introduction This was made to clarify general aspects concerning Windows exploitation. It explains basic concepts applied to CVE-2022-37969. The final result is a working PoC. It does not clarify every aspect about the CVE, but provides re-usable pieces of code and explains...

CVE-2025-5548

💣 Exploit Development - Buffer Overflow This repository documents the full process of exploiting a Buffer Overflow vulnerability, following a structured methodology from initial analysis to execution flow control. 🎯 Objective The goal of this phase is to develop a functional exploit that allows...