VoidSec

gpt4all

gpt4all: run open-source LLMs anywhere

Detect-It-Easy

Program for determining types of files for Windows, Linux and MacOS.

ScoutSuite

Multi-Cloud Security Auditing Tool

marshalsec

ret-sync

ret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2/x64dbg) with IDA/Ghidra/Binary Ninja disassemblers.

wtf

wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-mode (experimental!).

pbtk

A toolset for reverse engineering and fuzzing Protobuf-based apps

Spartacus

Spartacus DLL/COM Hijacking Toolkit

LOLDrivers

Living Off The Land Drivers

RpcView

RpcView is a free tool to explore and decompile Microsoft RPC interfaces

exploit_mitigations

Knowledge base of exploit mitigations available across numerous operating systems, architectures and applications and versions.

ipyida

IPython console integration for IDA Pro

idacode

An integration for IDA and VS Code which connects both to easily execute and debug IDAPython scripts.

winchecksec

Checksec, but for Windows: static detection of security mitigations in executables

kDriver-Fuzzer

VulnCases

Vulnerability examples.

DriverBuddyReloaded

Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks

ioctlbf

Windows Kernel Drivers fuzzer

APT38-0day-Stealer

APT38 Tactic PoC for Stealing 0days from security professionals

serianalyzer

A static byte code analyzer for Java deserialization gadget research

Exploit-Development

Exploit Development - Weaponized Exploit and Proof of Concepts (PoC)

JOP_ROCKET

This framework enables user to discover JOP gagdets and can automate building a complete JOP chain to bypass DEP. JOP ROCKET is the ultimate solution for Windows jump-oriented programming. JOP ROCKET also finds the novel two-gadget dispatcher, which greatly expands what is possible with JOP.

Fuzzing-Against-the-Machine

MCP-PoC

Minifilter Callback Patching Proof-of-Concept

jarjarbigs

A python script to merge multiple jar files for easier debugging via JD-Eclipse

IDAPython-pycharm-setup

How to setup Pycharm to run scripts in IDA using the Run menu (or a keybind)

alpnpass

This tool will listen on a given port, strip SSL encryption, forward traffic through a plain TCP proxy, then encrypt the returning traffic again and send it to the target of your choice. Unlike most SSL stripping solutions this tool will negotiate ALPN and preserve the negotiated protocol all the way to the target.

CycloComplexityCalc

a plugin to calculate complexity of executable's functions

CVE-2015-2291

(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call.

heappo

Heappo 🦛 is a PyKD based extensions for WinDBG which aids Heap Exploitation