fs0c-sh

SCSVS

Smart Contract Security Verification Standard

smart-contract-vulnerabilities

A collection of smart contract vulnerabilities along with prevention methods

community-challenges

weggli

weggli is a fast and robust semantic search tool for C and C++ codebases. It is designed to help security researchers identify interesting functionality in large codebases.

smuggler

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

ioc

Threat Intel IoCs + bits and pieces of dark matter

Dorks-collections-list

List of Github repositories and articles with list of dorks for different search engines

e9afl

AFL binary instrumentation

wtf

wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-mode (experimental!).

Fuzzing101

An step by step fuzzing tutorial. A GitHub Security Lab initiative

rewind

Snapshot-based coverage-guided windows kernel fuzzer

qemu_blog

A series of posts about QEMU internals:

office-exploit-case-study

project-based-learning

Curated list of project-based tutorials

PoC-in-GitHub

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

pwndra

A collection of pwn/CTF related utilities for Ghidra

libplayground

A simple framework for developing Linux kernel heap exploit techniques

AndroidKernelExploitationPlayground

frida-fuzzer

This experimetal fuzzer is meant to be used for API in-memory fuzzing.

kernel-exploit-practice

repository for kernel exploit practice

kernel_exploit_world

Tutorial for writing kernel exploits

villoc

Visualization of heap operations.

awesome-browser-exploit

awesome list of browser exploitation tutorials

my-ctf-design

My CTF designs.

pwn_repo

To store some CTF_pwn_bins and exploits for self-practice

syms2elf

A plugin for Hex-Ray's IDA Pro and radare2 to export the symbols recognized to the ELF symbol table

Crypton

Library consisting of explanation and implementation of all the existing attacks on various Encryption Systems, Digital Signatures, Key Exchange, Authentication methods along with example challenges from CTFs

doublethink

Doublethink challenge from DEF CON 2018

cutter

Free and Open Source Reverse Engineering Platform powered by rizin

freeCodeCamp

freeCodeCamp.org's open-source codebase and curriculum. Learn to code for free.