Stars
Linux Kernel Defence Map shows the relationships between vulnerability classes, exploitation techniques, bug detection mechanisms, and defence technologies
Collection of Notes and CheatSheets used for Red teaming Certs
Experience email the way you want with 0 – the first open source email app that puts your privacy and safety first. Join the discord: https://discord.gg/0email
Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.
Cobaltstrike Reflective Loader with Synthetic Stackframe
AIGoat: A deliberately Vulnerable AI Infrastructure. Learn AI security through solving our challenges.
A BOF to enumerate system process, their protection levels, and more.
openai-captcha-detection 是一个使用 OpenAI 进行验证码识别的工具。目前验证码识别准确率100%，通过调用 OpenAI 的 API，这个项目可以实现对复杂验证码图片的文本识别，帮助开发者在验证码处理场景中进行自动化操作。
RedInfraCraft automates the deployment of powerful red team infrastructures! It streamlines the setup of C2s, makes it easy to create advanced phishing & payload infras
Frida Script Runner is a versatile web-based tool designed for Android and iOS penetration testing purposes.
A code skeleton of Samsung's Shannon5123 5G baseband modem.
A simple Go program that detects whether the current Windows system is running inside a Hyper-V virtual machine environment(Guest) using CPUID instruction.
High performance fuzzing using riscv to x86 binary translations and modern fuzzing techniques
Kernel-mode Paravirtualization in Ring 2, LLVM based linker, and some other things!
Exploit for Grafana arbitrary file-read and RCE (CVE-2024-9264)
awesome list of browser exploitation tutorials
Project Ares is a Proof of Concept (PoC) loader written in C/C++ based on the Transacted Hollowing technique
This is a useful Python script for extracting bug bounty or any other write-ups from every RSS.
In this Arsenal lab session, we will extract firmware from an EV charger, dig into the firmware, and eventually emulate it so we can interact with the services in real-time.
RunasCs - Csharp and open version of windows builtin runas.exe
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.