JohnTroony

Octo Leap's starred repositories

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Language:PythonMIT57526 18070

pwntools

CTF framework and exploit development library

Language:PythonNOASSERTION11595 290 1018

pwndbg

Exploit Development and Reverse Engineering with GDB Made Easy

Language:PythonMIT6870 138 824

peda

PEDA - Python Exploit Development Assistance for GDB

Language:PythonNOASSERTION5780 206 97

HowToHunt

Collection of methodology and test case for various web vulnerabilities.

GPL-3.05624 271 16

This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.

Language:PythonNOASSERTION3755 121 93

Ropper

Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper uses the awesome Capstone Framework.

Language:PythonBSD-3-Clause1803 55 104

libc-database

Build a database of libc offsets to simplify exploitation

Language:ShellMIT1651 32 26

investigations

Indicators from Amnesty International's investigations

Language:Python1534 114 16

microsocks

tiny, portable SOCKS5 server with very moderate resource usage

Language:CNOASSERTION1356 38 48

kubesploit

Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

Language:GoGPL-3.01080 28 2

redress

Redress - A tool for analyzing stripped Go binaries

Language:GoAGPL-3.0883 13 15

JNDI-Exploit-Kit

JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP Server, RMI Server and LDAP Server to exploit java web apps vulnerable to JNDI Injection）

Language:JavaMIT879 190