
Detect-It-Easy
Program for determining types of files for Windows, Linux and MacOS.

Program for determining types of files for Windows, Linux and MacOS.

UNIX-like reverse engineering framework and command-line toolset

A powerful and user-friendly binary analysis platform!

Ghidra is a software reverse engineering (SRE) framework

PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full…

OPPO Find N2 GhostLock (CVE-2026-43499) exploit adaptation

CVE-2026-31431 Copy Fail — Linux kernel LPE tester via MCP

Exploit Development and Reverse Engineering with GDB & LLDB Made Easy

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

VirtualBox 7.2.20 - Critical - Local - Type confusion / arb R/W - SAS1068 CONFIG SCSI-SPI overlay

VirtualBox 7.2.20 - High - Local - Heap overflow - HGCM SSM cParms wrap

Research repository for CVE-2025-38502, a Linux kernel BPF cgroup local storage out-of-bounds access via tail calls enabling local privilege…

A technique that mixes NTDLL unhooking and hellsgate gate varients

Research toolkit that roots a Samsung Tizen 9 TV via a Chromium WasmGC RCE and V4L2 physmap arbitrary physical memory access, with persistent on-boot…

ExploitGym is a large-scale, realistic benchmark built from real-world vulnerabilities designed to evaluate AI agents' ability to develop exploits.

CVE-2026-109618/109619 — PHP session.upload_progress pre-auth RCE. Exploit research: remote ASLR chain, PoC & patch analysis.

A public release of the Steal My Bitcoin challenge

Black-box pentest lab for the PHP2Shell engine memory-corruption family (CVE-2026-109618 / CVE-2026-109619, CVSS 9.8/9.2). Dual-flag verified attack…