Freshnuts

ollama

Get up and running with Llama 3, Mistral, Gemma 2, and other large language models.

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

gdbgui

Browser-based frontend to gdb (gnu debugger). Add breakpoints, view the stack, visualize data structures, and more in C, C++, Go, Rust, and Fortran. Run gdbgui from the terminal and a new tab will open in your browser.

Xtreme-Firmware

The Dom amongst the Flipper Zero Firmware. Give your Flipper the power and freedom it is really craving. Let it show you its true form. Dont delay, switch to the one and only true Master today!

Gogh

Gogh is a collection of color schemes for various terminal emulators, including Gnome Terminal, Pantheon Terminal, Tilix, and XFCE4 Terminal also compatible with iTerm on macOS.

CrackMapExec

A swiss army knife for pentesting networks

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com

harpoon

xrdp

xrdp: an open source RDP server

scan4all

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

winafl

A fork of AFL for fuzzing Windows binaries

rp

rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries.

securitylab

Resources related to GitHub Security Lab

Awesome-Vulnerability-Research

🦄 A curated list of the awesome resources about the Vulnerability Research

DDexec

A technique to run binaries filelessly and stealthily on Linux by "overwriting" the shell's process with another.

libseccomp

The main libseccomp repository

flatbox

Low profile hitbox-layout fightstick

kernel-security-learning

Anything about kernel security. CTF kernel pwn, kernel exploit, kernel fuzz and kernel defense paper, kernel debugging technique, kernel CVE debug.

conti-leaks-englished

Google and deepl translated conti leaks, which is shared by a member of the conti ransomware group.

iam-vulnerable

Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.

fileless-elf-exec

Execute ELF files without dropping them on disk

sharem

SHAREM is a shellcode analysis framework, capable of emulating more than 20,000 WinAPIs and virutally all Windows syscalls. It also contains its own custom disassembler, with many innovative features, such as being able to show the deobfuscated disassembly of an encoded shellcode, or integrating emulation data to enhance the disassembly.

splint

Splint - annotation-assisted static program checker

dropper

Project that generates Malicious Office Macro Enabled Dropper for DLL SideLoading and Embed it in Lnk file to bypass MOTW

Binary-exploit-writeups

ROP_ROCKET

ROP ROCKET is an advanced code-reuse attack framework, with extensive ROP chain generation capabilities, including for novel Windows Syscalls attack, a novel Heaven's Gate, and "shellcodeless" ROP. The framework utilizes emulation and obfuscation to help expand the attack surface.

narly

Automatically exported from code.google.com/p/narly

osed_prep

A collection of Windows x32 exploits created while preparing for the OSED certification exam

DistrolessRCE

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.