buherator — Vaya

avpwn. List of real-world threats against endpoint protection software

218

peCloakCapstone. Platform independent peCloak fork based on Capstone

110

cve-2019-12750. sploit

66

DangerousPHPFunctions. Growing list of potentially dangerous PHP functions

52

kaspy_toolz. Python

46

bigiron. Collection of materials related to IBM z/OS security

45

oracle_forms. Testing tools for Oracle Forms

45

WindowsDefenderTools. Tools for instrumenting Windows Defender's mpengine.dll

37

pydbg. A pure-python win32 debugger interface.

28

similarninja. Binary matching with Binary Ninja

22

loadlibrary. Porting Windows Dynamic Link Libraries to Linux

21

rabbithole. Cumulative cyclomatic complexity calculation for Ghidra

20

MSF-Addons. Modules, Scripts, Plugins for the Metasploit Framework

20

ivmi. Interactive Virtual Machine Introspection

18

ghidra-vftable. Generate Ghidra class structures

12

xer. Byte stream conversion swiss army knife

12

av-excuses. Security Software Subterfuge Standard

9

S2GWTEnum. Enumerating RPC interfaces from obfuscated GWT cache files

8

pdml2pit. Wireshark PDML to Peach Pit

8

libfuzzer_kfx. Rust

8

IDAPy_callgraph_diff. IDAPython callgraph differ

7

image-memleak-testsuite.

6

Cartographer. Code Coverage Exploration Plugin for Ghidra

6

hexcalc. DIY calculator with a hexadecimal keypad

6

rss2bsky.py. RSS to Bluesky - in Python

6

CVEharvester. Collecting CVE information, filtering Candidates

5

prefetch-lib. Static library implementing prefetch side-channel KASLR leaks

5

SEPDisabler. Anti-anti-virus

5

buherablog-uaf. Use-after-free tutorial codes

4

CamelDict. simple wordlist generator to test "enterprise" applications

4

buherablog-cve-2013-1488. PoC Java exploit based on http://www.contextis.com/research/blog/java-pwn2own/

4

prefetch-tool. Windows KASLR bypass using prefetch side-channel

4

ripr. Package Binary Code as a Python class using Binary Ninja and Unicorn Engine

3

binaryninja-docker. Run Binary Ninja GUI with Docker

3

xss-reflections. Reflections on Reflected XSS

3

image-memleak. Python

3

phrackgen. Generate single-file Phrack magaznie e-books

3

ghidra-checkprotector. Find functions without canary check (or similar)

3

ghidra-graph-export. Export Function Graphs from Ghidra

3

kernel-fuzzer-for-xen-project. VMI Kernel Fuzzer for Xen Project: VM forking, VMI & AFL integration demo

2

twos. Command-line signed/unsigned integer converter utility

2

ghidra-function-graph-datasets.

2

pynessus. git clone of the pynessus project

2

SafePath. Experimental library for safe filesystem path handling

1

Sensor-Watch-Docker. Dockerized Sensor Watch Emulator

1

seo-test. index me plz

1

codeql-verify-goto. CodeQL

1

log4shell-vulnerable-app. Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell.

1

squid-havewemet. Poor man's domain reputation for Squid proxy

1

electron-ipcrenderer. Electron Security - ipcRenderer.on() Misuse Demo

1

leakphp. PHP

1

buherablog-packet-fu. Packet-fu

1

awesome-windows-exploitation. A curated list of awesome Windows Exploitation resources, and shiny things. Inspired by awesom

1