Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wis…

rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries.

The official FiveM server management platform used by over 23k servers!

PwnFox is a Firefox/Burp extension that provide usefull tools for your security audit.

Stanford's Machine Learning Exercises

Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.

Domain-driven e-commerce for Django

Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a maliciou…

Linux LD_PRELOAD rootkit (x86 and x86_64 architectures)

Metasploit Framework

Automatic SQL injection and database takeover tool

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

Yet Another Linux Virtual Machine for Mobile Application Pentesting and Mobile Malware Analysis

Source Code for the book Building Machine Learning Systems with Python

A Python module to scrape several search engines (like Google, Yandex, Bing, Duckduckgo, ...). Including asynchronous networking support.

Project template layout for Django 3.0+

Small tool to package javascript into a valid image file.

Search on Google, and crawls for emails related to the result

Framework for Man-In-The-Middle attacks

Content Security Policy for Django.

Stuff you might use when exploiting software

A minimalist kernel

Multi-threaded tool for scanning many hosts for CVE-2014-0160.

JavaScript Regular expressions made easy

Linux Exploit Suggester; based on operating system release number

Papers from the computer science community to read and discuss.

Azazel is a userland rootkit based off of the original LD_PRELOAD technique from Jynx rootkit. It is more robust and has additional features, and focuses heavily around anti-debugging and anti-dete…

📚 Freely available programming books