A Terminal Client for MySQL with AutoCompletion and Syntax Highlighting.

Nginx configuration static analyzer

The x86 processor fuzzer

The Leading Security Assessment Framework for Android.

Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.

PyInstaller Extractor

Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper us…

Reverse proxies cheatsheet

Shamelessly convert any Python 2 script into a terrible single line of code

IDA Pro plugin which improves work with HexRays decompiler and helps in process of reconstruction structures and classes

DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。

A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)

How to exploit a double free vulnerability in 2021. Use After Free for Dummies

An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction

Create tar/zip archives that can exploit directory traversal vulnerabilities

This is a repo which documents real bugs in real software to illustrate trends, learn how to prevent or find them more quickly.

Find regular expressions which are vulnerable to ReDoS (Regular Expression Denial of Service)

CTF write-ups by Plaid Parliament of Pwning

mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse

Bluetooth experimentation framework for Broadcom and Cypress chips.

HTTP Request Smuggling over HTTP/2 Cleartext (h2c)

A shellcode writing toolkit

An archive of low-level CTF challenges developed over the years

MySQL fake server for read files of connected clients

A codebase aimed to make interaction with Windows and native execution easier

CVE-2020-0796 Remote Code Execution POC

Intel Management Engine JTAG Proof of Concept

A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementing page protection changes during no execution.

Using Intel's PIN tool to solve CTF problems

Hermes Bytecode Reverse Engineering Tool (Assemble/Disassemble Hermes Bytecode)