hakivvi
Follow
Stars
A Terminal Client for MySQL with AutoCompletion and Syntax Highlighting.
The Leading Security Assessment Framework for Android.
Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.
Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper us…
Shamelessly convert any Python 2 script into a terrible single line of code
IDA Pro plugin which improves work with HexRays decompiler and helps in process of reconstruction structures and classes
A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)
How to exploit a double free vulnerability in 2021. Use After Free for Dummies
An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
Create tar/zip archives that can exploit directory traversal vulnerabilities
This is a repo which documents real bugs in real software to illustrate trends, learn how to prevent or find them more quickly.
Find regular expressions which are vulnerable to ReDoS (Regular Expression Denial of Service)
CTF write-ups by Plaid Parliament of Pwning
mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse
Bluetooth experimentation framework for Broadcom and Cypress chips.
HTTP Request Smuggling over HTTP/2 Cleartext (h2c)
An archive of low-level CTF challenges developed over the years
A codebase aimed to make interaction with Windows and native execution easier
A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementing page protection changes during no execution.
Using Intel's PIN tool to solve CTF problems
Hermes Bytecode Reverse Engineering Tool (Assemble/Disassemble Hermes Bytecode)
Toolbox for HPE iLO4 & iLO5 analysis
Academic papers and articles that I read related to web hacking, fuzzing, etc. / 阅读过的Web安全方向、模糊测试方向的一些论文与阅读笔记
Issues with WebSocket reverse proxying allowing to smuggle HTTP requests