Goyotan

kaitai_struct

Kaitai Struct: declarative language to generate binary data parsers in C++ / C# / Go / Java / JavaScript / Lua / Nim / Perl / PHP / Python / Ruby

XSS_sinks

STL

MSVC's implementation of the C++ Standard Library.

Some-Fuzzing-Support-Script

FirmAFL

FIRM-AFL is the first high-throughput greybox fuzzer for IoT firmware.

CVE-2019-16098

Local privilege escalation PoC exploit for CVE-2019-16098

FuzzFactory

Domain-Specific Fuzzing with Waypoints

CVE-2019-1253

Poc for CVE-2019-1253

exploit_playground

fuzzing

Tutorials, examples, discussions, research proposals, and other resources related to fuzzing

unicorefuzz

Fuzzing the Kernel Using Unicornafl and AFL++

BrokenType

TrueType and OpenType font fuzzing toolset

B-XSSRF

Toolkit to detect and keep track on Blind XSS, XXE & SSRF

ipasim

iOS emulator for Windows

ropium

ROPium is a tool that helps you building ROP exploits by finding and chaining gadgets together

GhostRule

Some exploits to bypass Safer Mode in Ghostscript

oss-fuzz

OSS-Fuzz - continuous fuzzing for open source software.

obfuscator

CppCoreGuidelines

The C++ Core Guidelines are a set of tried-and-true guidelines, rules, and best practices about coding in C++

manul

Manul is a coverage-guided parallel fuzzer for open-source and blackbox binaries on Windows, Linux and MacOS

rust-reversing-helper

Rust reversing helper script

windows_10_rs2_rs3_exploitation_primitives

Windows 10 RS2/RS3 exploitation primitives based on the OffensiveCon 2018 talk

pwnjs

A Javascript library for browser exploitation

browser-pwn

An updated collection of resources targeting browser-exploitation.

uniFuzzer

A fuzzing tool for closed-source binaries based on Unicorn and LibFuzzer

sentinel-attack

Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK

acrn-kernel

Kernel tree for ACRN

sds

Simple Dynamic Strings library for C

apple_bleee

Apple BLE research

The-Hackers-Hardware-Toolkit

The best hacker's gadgets for Red Team pentesters and security researchers.