Elixir/Unix style pipe operations in Ruby - PROOF OF CONCEPT

Unicode characters that will translate a single character to multiple characters in domain names or TLD's

Android 14 kernel exploit for Pixel7/8 Pro

A toy compiler that can convert Python scripts 🐍 to pickle bytecode 🥒

Zaps arguments and environment from the process list

A list of weird comparison in SQL

Web-based tool that allows comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the OS.

Copy of the BIOS Disassembly Ninjutsu ("1st Edition") PDF

Hermes Bytecode Reverse Engineering Tool (Assemble/Disassemble Hermes Bytecode)

BinData - Reading and Writing Binary Data in Ruby

Library for manually creating Java serialization data.

The modern Java bytecode editor

📡🐧 Linux kernel syscall implementation tracker

TC39 proposal for mitigating prototype pollution

This is a repo for small, useful scripts and extensions

A utility to dump all Protobuf file descriptors from a given binary as *.proto files

Various code snippets that abuse Ruby in one way or another.

This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

Reimplementation of TheFlow's bd-jb. No kernel part yet.

A reliable exploit + write-up to elevate privileges to root. (Tested on Ubuntu 22.04)

Opcode calculator / ASM calculator

HTTPLeaks - All possible ways, a website can leak HTTP requests

Unofficial frida extension for VSCode

A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementing page protection changes during no execution.

This book on heap exploitation is a guide to understanding the internals of glibc's heap and various attacks possible on the heap structure.

构造字节在ASCII范围内的jar

The first bd-j hack.

Full disclosures for CVE ids, proofs of concept, exploits, 0day bugs and so on.