#1Binary exploitation techniques, ROP chains, heap exploitation, format strings, and memory corruption research.
Kitploit recommended
silentisvox/syscallrevenantClean Indirect Syscalls with Syscall Tampering.
abraxas/qemu-colo-l4-oobQEMU 11.1.2 - High - Local/Remote - OOB - COLO filter-rewriter short IPv4 L4 heap overflow
abraxas/qemu-xhci-complete-uafQEMU 11.1.2 - High - Local - UAF - xhci_complete leftover of CVE-2026-17588 doorbell DMA
abraxas/vbox-hgcm-ssm-cparmsVirtualBox 7.2.20 - High - Local - Heap overflow - HGCM SSM cParms wrap
abraxas/vbox-lsilogic-sas-configVirtualBox 7.2.20 - Critical - Local - Type confusion / arb R/W - SAS1068 CONFIG SCSI-SPI overlay
jaime64net/debuggerj-Debugger de aplicaciones x86 y x64 con intgracion de AI
mein-0/knockgigaProof-of-concept local privilege escalation exploiting Gigabyte gdrv3.sys IOCTLs to write the SYSTEM token into a user process via an unchecked…
gmh5225/memory-relocallocC proof-of-concept that locates code caves in the .reloc section of mapped DLLs to allocate and execute small shellcode, replacing typical memory…
yv1ing/secboxConducting cybersecurity testing using the pi agent in a pre-built sandbox environment.
newbe3e/pwn2own-automotive-2026-alpine-ilx-f511-0-click-rce-exploit-writeupThis is a write up of the exploit I developed for the Pwn2Own Automotive 2026 competition.
woldann/exoprocCross-process instrumentation for Windows x64 in TypeScript — hook functions, redirect threads, and read/write memory in another process, with no DLL…
sk4r4b/ntdll-reconstructionA technique that mixes NTDLL unhooking and hellsgate gate varients
aethervm/aethervmLLVM-native binary analysis and emulation platform that lifts AArch64 and x86_64 machine code to LLVM IR for instrumentation, deobfuscation, and…
abraxas/litebox-snp-novalidation-userptrHigh local write primitive: LiteBox v0.1.0 SNP UserPtr is NoValidation so guest syscall buf can be a kernel VA
gmh5225/lithium-kernelWindows kernel-mode driver with user-mode client exposing IOCTL-based physical and virtual memory read/write, page table walking, pattern scanning,…
x86rc/vmp-lazy-unpackEmulation-based unpacker and import resolver for Windows x86/x64 VMProtect 3.x binaries, using Unicorn to emulate syscalls and rebuild the IAT…
lcfr-hax/cve-2024-14027_slopExploits for CVE-2024-14027 creating using AI/Claude as a test.
itm4n/pentest-windowsCollection of Windows internals research and exploitation techniques covering privilege escalation, token abuse, and post-exploitation tricks for red…
