#1Binary exploitation techniques, ROP chains, heap exploitation, format strings, and memory corruption research.
Kitploit recommended
lief-project/liefCross-platform library to parse, modify, and abstract ELF, PE, and MachO executable formats. Supports C++, Python, and Rust APIs with disassembler,…
hugsy/gefGEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux
unicorn-engine/unicornUnicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, PowerPC, RiscV, S390x, TriCore, X86)
theori-io/copy-fail-cve-2026-31431Exploits a 9-year-old Linux kernel local privilege escalation (CVE-2026-31431); provides tested exploit logic for Ubuntu, Amazon Linux, RHEL, and…
rizinorg/rizinUNIX-like reverse engineering framework and command-line toolset.
ljagiello/ctf-skillsAgent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more
0x4d31/awesome-oscpA curated list of awesome OSCP resources
longld/pedaPEDA - Python Exploit Development Assistance for GDB
hfiref0x/kduWindows kernel driver utility that abuses vulnerable signed drivers (BYOVD) to bypass DSE, load unsigned drivers, hijack protected processes, and…
nebusec/cybermeowfiaPoCs and exploits for CVEs discovered by NebuSec.
jonathansalwan/ropgadgetSearch for ROP gadgets in ELF, PE, Mach-O, and Raw binaries across x86, ARM, MIPS, and RISC-V architectures. Supports automated ROP chain generation…
theofficialflow/pppwnPPPwn - PlayStation 4 PPPoE RCE
byt3bl33d3r/offensivenimMy experiments in weaponizing Nim (https://nim-lang.org/)
threedr3am/learnjavabugJava安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security…
r4j0x00/exploitsProof-of-concept exploit collection targeting Linux kernel LPE, sudo heap overflow, and Chrome V8 OOB write vulnerabilities for penetration testing.
niklasb/libc-databaseBuild a database of libc offsets to simplify exploitation
dryxio/auto-re-agentReconstruct and validate C/C++ code from compiled programs with AI.
