This is your work, valued
avpwn. List of real-world threats against endpoint protection software
218peCloakCapstone. Platform independent peCloak fork based on Capstone
110cve-2019-12750. sploit
66DangerousPHPFunctions. Growing list of potentially dangerous PHP functions
52kaspy_toolz. Python
46bigiron. Collection of materials related to IBM z/OS security
45oracle_forms. Testing tools for Oracle Forms
45WindowsDefenderTools. Tools for instrumenting Windows Defender's mpengine.dll
37pydbg. A pure-python win32 debugger interface.
28similarninja. Binary matching with Binary Ninja
22loadlibrary. Porting Windows Dynamic Link Libraries to Linux
21rabbithole. Cumulative cyclomatic complexity calculation for Ghidra
20MSF-Addons. Modules, Scripts, Plugins for the Metasploit Framework
20ivmi. Interactive Virtual Machine Introspection
18ghidra-vftable. Generate Ghidra class structures
12xer. Byte stream conversion swiss army knife
12av-excuses. Security Software Subterfuge Standard
9S2GWTEnum. Enumerating RPC interfaces from obfuscated GWT cache files
8pdml2pit. Wireshark PDML to Peach Pit
8libfuzzer_kfx. Rust
8IDAPy_callgraph_diff. IDAPython callgraph differ
7image-memleak-testsuite.
6Cartographer. Code Coverage Exploration Plugin for Ghidra
6hexcalc. DIY calculator with a hexadecimal keypad
6rss2bsky.py. RSS to Bluesky - in Python
6CVEharvester. Collecting CVE information, filtering Candidates
5prefetch-lib. Static library implementing prefetch side-channel KASLR leaks
5SEPDisabler. Anti-anti-virus
5buherablog-uaf. Use-after-free tutorial codes
4CamelDict. simple wordlist generator to test "enterprise" applications
4buherablog-cve-2013-1488. PoC Java exploit based on http://www.contextis.com/research/blog/java-pwn2own/
4prefetch-tool. Windows KASLR bypass using prefetch side-channel
4ripr. Package Binary Code as a Python class using Binary Ninja and Unicorn Engine
3binaryninja-docker. Run Binary Ninja GUI with Docker
3xss-reflections. Reflections on Reflected XSS
3image-memleak. Python
3phrackgen. Generate single-file Phrack magaznie e-books
3ghidra-checkprotector. Find functions without canary check (or similar)
3ghidra-graph-export. Export Function Graphs from Ghidra
3kernel-fuzzer-for-xen-project. VMI Kernel Fuzzer for Xen Project: VM forking, VMI & AFL integration demo
2twos. Command-line signed/unsigned integer converter utility
2ghidra-function-graph-datasets.
2pynessus. git clone of the pynessus project
2SafePath. Experimental library for safe filesystem path handling
1Sensor-Watch-Docker. Dockerized Sensor Watch Emulator
1seo-test. index me plz
1codeql-verify-goto. CodeQL
1log4shell-vulnerable-app. Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell.
1squid-havewemet. Poor man's domain reputation for Squid proxy
1electron-ipcrenderer. Electron Security - ipcRenderer.on() Misuse Demo
1leakphp. PHP
1buherablog-packet-fu. Packet-fu
1awesome-windows-exploitation. A curated list of awesome Windows Exploitation resources, and shiny things. Inspired by awesom
1