ripp3rdoc

AllAboutBugBounty

All about bug bounty (bypasses, payloads, and etc)

BBTz

BBT - Bug Bounty Tools (examples💡)

wtf

wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-mode (experimental!).

CS-checklist

PC客户端（C-S架构）渗透测试checklist / Client side(C-S) penetration checklist

libprotobuf-mutator

Library for structured fuzzing with protobuffers

winnie

Winnie is an end-to-end system that makes fuzzing Windows applications easy

VCG

VisualCodeGrepper - Code security scanning tool.

nemesis

A command-line network packet crafting and injection utility

osed-scripts

bespoke tooling for offensive security's Windows Usermode Exploit Dev course (OSED)

Life-long-Learner

Personal Notes About Everything.

Exploit-Development

Exploit-Development

Exploit Development - Weaponized Exploit and Proof of Concepts (PoC)

MITM_Intercept

A little bit less hackish way to intercept and modify non-HTTP protocols through Burp & others.

fuzzgoat

A vulnerable C program for testing fuzzers.

CVE-2022-42046

CVE-2022-42046 Proof of Concept of wfshbr64.sys local privilege escalation via DKOM

CRLF-Injection-Scanner

Command line tool for testing CRLF injection on a list of domains.

GEARSHIFT

chrome_v8_ndays

Chrome V8 n-day exploits that I've written.

EXP-401-OSEE

A bunch of resources to prepare for the OSEE certification, Offensive Security's hardest course.

whvp

PoC for a snapshot-based coverage-guided fuzzer targeting Windows kernel components

HEVD_Kernel_Exploit

Exploits pack for the Windows Kernel mode driver HackSysExtremeVulnerableDriver written for educational purposes.

Van1338

A journal for $6,000 Riot Vanguard bounty.

OSEE

All efforts for the AWE course and preparation for the Offensive Security Exploitation Expert (OSEE) exam.

Linux-Kernel-VR-Exploitation

Linux & Android Kernel Vulnerability research and exploitation

AyedFuzzer

AyedFuzzer is a small File-Format-Fuzzer with 3 options (File-mutating, WinDbg-interactive monitor, multi-processing) for windows executables

WebShell

Backdoor Collection 👾

writeups-about-analysis-CVEs-and-Exploits-on-the-Windows

I collect writeup about analysis CVEs and Exploits on the Windows in this repository.

Exploit-Google-Chrome-86.0.4240_V8_RCE

Google Chrome 86.0.4240 V8 - Remote Code Execution

AWE-OSEE-Prep

Advanced Windows Exploitation/Offensive Security Exploitation Expert Preparation for Black Hat 2022

OSEE-Prep