Stars
A byte code analyzer for finding deserialization gadget chains in Java applications
Elixir/Unix style pipe operations in Ruby - PROOF OF CONCEPT
Unicode characters that will translate a single character to multiple characters in domain names or TLD's
A toy compiler that can convert Python scripts 🐍 to pickle bytecode 🥒
Zaps arguments and environment from the process list
Web-based tool that allows comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the OS.
Copy of the BIOS Disassembly Ninjutsu ("1st Edition") PDF
Hermes Bytecode Reverse Engineering Tool (Assemble/Disassemble Hermes Bytecode)
BinData - Reading and Writing Binary Data in Ruby
Library for manually creating Java serialization data.
TC39 proposal for mitigating prototype pollution
This is a repo for small, useful scripts and extensions
A utility to dump all Protobuf file descriptors from a given binary as *.proto files
Various code snippets that abuse Ruby in one way or another.
This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.
Reimplementation of TheFlow's bd-jb. No kernel part yet.
A reliable exploit + write-up to elevate privileges to root. (Tested on Ubuntu 22.04)
HTTPLeaks - All possible ways, a website can leak HTTP requests
A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementing page protection changes during no execution.
This book on heap exploitation is a guide to understanding the internals of glibc's heap and various attacks possible on the heap structure.