A collection of hacking / penetration testing resources to make you better!

Collection of things made during my OSCP journey

Automatic Exploit Generation (AEG) and remote flag capture for exploitable CTF problems

Notes for taking the OSCP in 2097. Read in book form on GitBook

A handy collection of my public exploits, all in one place.

Advanced buffer overflow and memory corruption security challenges

Exploitation on ARM-based Systems (Troopers18)

Exploit Development and Reverse Engineering topics

The Source Code Sniffer is a poor man’s static code analysis tool (SCA) that leverages regular expressions. Designed to highlight high risk functions (Injection, LFI/RFI, file uploads etc) across multiple languages (ASP, Java, CSharp, PHP, Perl, Python, JavaScript, HTML etc) in a highly configurable manner.

Exploitation and Mitigation Slides

DoS PoC's for SAP products

:hammer_and_wrench: Proof-of-concept code for Heartbleed a.k.a. CVE2014-0160 with STARTTLS support for various protocols

Just another OSCP prep guide into buffer overflows using Python

Bruteforce commandline buffer overflows and automated exploit generation, linux, aggressive arguments

Red-team tool to hook libc read syscall with a buffer overflow vulnerability.

Bluefrost Exploitation Challenge 2019 - Exploit and Writeup

#INFILTRATE19 raptor's party pack

This is the source of our Return Oriented Programming tool.

New CVE's produced via this repo: CVE-2019-16724, CVE-2019-17181

Exercises for 521155S Computer Security course in the University of Oulu

random buffer overflows as I get ready to take the oscp in 2097

Repo for reports on various security issues

Tool for finding Buffer Overflows in simple binaries. CTF use mainly.

Shellcode / Buffer Overflow 💣

Hacking Tricks, Techniques & Tools

An auto return to libc pwner

Payloads for buffer overflows and other cyberweapons. Small payloads, all in the 30-40 byte range, with the plain exec /bin/sh weighing in sub 30 bytes @ 28 Bytes.

A fork (and mirror) of the Buffer Overflow Module created by NSF Award No. 0113627

Read and write directly to a socket. Like nc, but it also has a feature that enables easy testing for buffer overflows.