r0t0tiller

awesome-reverse-engineering

Reverse Engineering Resources About All Platforms(Windows/Linux/macOS/Android/iOS/IoT) And Every Aspect! (More than 3500 open source tools and 2300 posts&videos)

awesome-browser-exploit

awesome list of browser exploitation tutorials

wtf

wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-mode (experimental!).

EDRSandblast

BokuLoader

A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!

CallObfuscator

Obfuscate specific windows apis with different apis

Advanced-Process-Injection-Workshop

rootkit-rs

Rusty Rootkit - Windows Kernel Rookit in Rust (Codename: Eagle)

win32k-bugs

Dump of win32k POCs for bugs I've found

YANSOllvm

Yet Another Not So Obfuscated LLVM

KernelBypassSharp

C# Kernel Mode Driver to read and write memory in protected processes

process_overwriting

Yet another variant of Process Hollowing

bug-hunting-101

DriverBuddyReloaded

Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks

rewind

Snapshot-based coverage-guided windows kernel fuzzer

e9afl

AFL binary instrumentation

Back2TheFuture

Find patterns of vulnerabilities on Windows in order to find 0-day and write exploits of 1-days. We use Microsoft security updates in order to find the patterns.

Mac_Vuln

IOCTLDump

PoolViewer

An application to view and filter pool allocations from a dmp file on Windows 10 RS5+.

zenith

Zenith exploits a memory corruption vulnerability in the NetUSB driver to get remote-code execution on the TP-Link Archer C7 V5 router for Pwn2Own Austin 2021.

ios-kernel-heap-profiler

iOS kernel heap memory profiler for sprayers

shakeitoff

Windows MSI Installer LPE (CVE-2021-43883)

WindowsMDMLPE

oxide

A PoC packer written in Rust!

CVE-2022-26717-Safari-WebGL-Exploit

WAMpage

WAMpage - A WebOS root LPE exploit chain (CVE-2022-23731)

Rust-Privesc

privilege escalation POCs built in Rust.

WHPHook

Simple DLL and client app that work together to hook all the functions in WinHvPlatform.dll in order to provide logging and introspection at the hypervisor level

tetragone