Binary Exploitation

silentisvox/syscallrevenant

Clean Indirect Syscalls with Syscall Tampering.

pwndbg/pwndbg

Exploit Development and Reverse Engineering with GDB & LLDB Made Easy

suruurism/cve-writeups-and-pocs

CVE-2026-80724 PoC + full write-up — Linux kernel ptp/vmclock read-only mapping becomes writable (VM_MAYWRITE). Discovered, reported & fixed by…

rizinorg/rizin

UNIX-like reverse engineering framework and command-line toolset.

capstone-engine/capstone

Multi-architecture disassembly framework providing a lightweight, thread-safe API for binary analysis, reverse engineering, and malware research…

lief-project/lief

Cross-platform library to parse, modify, and abstract ELF, PE, and MachO executable formats. Supports C++, Python, and Rust APIs with disassembler,…

x64dbg/x64dbg

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

dnspyex/dnspy

Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

nanoturtle1145/root-my-s24

Using CVE-2026-43499 to root your Galaxy S24 Series(SM-S92X0 ,(China / Hong Kong SAR / Taiwan))

gallopsled/pwntools

CTF framework and exploit development library

alfiecg24/trigon

Deterministic kernel exploit based on CVE-2023-32434.

abraxas/qemu-colo-l4-oob

QEMU 11.1.2 - High - Local/Remote - OOB - COLO filter-rewriter short IPv4 L4 heap overflow

abraxas/qemu-xhci-complete-uaf

QEMU 11.1.2 - High - Local - UAF - xhci_complete leftover of CVE-2026-17588 doorbell DMA

ljagiello/ctf-skills

Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more

abraxas/vbox-hgcm-ssm-cparms

VirtualBox 7.2.20 - High - Local - Heap overflow - HGCM SSM cParms wrap

abraxas/vbox-lsilogic-sas-config

VirtualBox 7.2.20 - Critical - Local - Type confusion / arb R/W - SAS1068 CONFIG SCSI-SPI overlay