gkforfun Goto Github PK

android-task-injection

Task Hijacking in Android (somebody call it also StrandHogg vulnerability)

archeap

ArcHeap: Automatic Techniques to Systematically Discover New Heap Exploitation Primitives

awesome-cve-poc

✍️ A curated list of CVE PoCs.

blog

**科学技术大学计算机学院课程资源(https://mbinary.xyz/ustc-cs/)

cisco-snmp-rce

Cisco IOS SNMP RCE PoC

collect-info-research

a project to help you collect info every day.

ctf

Something about CTF and vulnerability environment, mainly about kernel exploit.

cve-2022-21449-tls-poc

CVE-2022-21449 Proof of Concept demonstrating its usage with a client running on a vulnerable Java version and a malicious TLS server

cve-2022-26717-safari-webgl-exploit

dll-trojan

dll-Trojan

domino_fuzzer

Domato + Template based Fuzzing

full-stack-tree

全栈工程师技能树

functionsimsearch

Some C++ example code to demonstrate how to perform code similarity searches using SimHashing.

ghidra

Ghidra is a software reverse engineering (SRE) framework

golang_loader_assist

Making GO reversing easier in IDA Pro

heap-exploitation-in-real-world

idapython

ida python scripts, for code coverage

kernel-exploit-factory

Linux kernel CVE exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environment anymore.

lighthouse

Code Coverage Explorer for IDA Pro & Binary Ninja

openssl-key-exchange

A process for key negotiation using ECDH (Elliptic-Curve Diffie–Hellman)

python-rebound-shell

rubeus

Trying to tame the three-headed dog.

secconarchive

Security Conference Archive

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sharpdpapi

SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.

stringsifter

A machine learning tool that automatically ranks strings based on their relevance for malware analysis.

subdomainsbrute

A fast sub domain brute tool for pentesters

trapfuzzer

vulseeker

VulSeeker: A Semantic Learning Based Vulnerability Seeker For Cross-Platform Binary

webshell-detect-bypass

绕过专业工具检测的Webshell研究文章和免杀的Webshell