harmmachine Goto Github PK

ad-pentest-script

Active Directory pentest scripts

aegg

my automatic exploit generation

android-afl

Fuzzing Android program with american fuzzy lop (AFL)

angora

Angora is a mutation-based fuzzer. The main goal of Angora is to increase branch coverage by solving path constraints without symbolic execution.

avmdbg

a lightweight debugger for android virtual machine.

betterdefaultpasslist

chipsec

Platform Security Assessment Framework

choronzon

An evolutionary knowledge-based fuzzer

cve-2017-7092-exploit

This is the Pwn2Own 2017 Safari backup vul's exploit.

domato

DOM fuzzer

edge-sandbox-escape

fexm

Automated fuzzing framework

frida_exercise

The best way to learn Frida, is practicing. This is an example of scripts to use in a practical workshop.

fuzzinator

Fuzzinator Random Testing Framework

fuzzing_paper

puzzing related paper

heaphopper

HeapHopper is a bounded model checking framework for Heap-implementations

heapinfo

An interactive memory info for pwning / exploiting

hostintel

A modular Python application to collect intelligence for malicious hosts.

house-of-corrosion

A description of the "House of Corrosion" GLIBC heap exploitation technique.

ie11-flash-steal

js-vuln-db

A collection of JavaScript engine CVEs with PoCs

libfuzzer-workshop

Repository for materials of "Modern fuzzing of C/C++ Projects" workshop.

libheap

python library to examine ptmalloc (the glibc userland heap implementation)

loadlibrary

Porting Windows Dynamic Link Libraries to Linux

mms

Modern Memory Safety in C/C++

one_gadget

A tool for you easy to find the one gadget RCE in libc.so.6

osxfuzz

macOS Kernel Fuzzer

pigaios

A tool for matching and diffing source codes directly against binaries.

poisontap

Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.

pwn2own2018

A Pwn2Own exploit chain