
dismember
:knife: Scan memory for secrets and more. Maybe eventually a full /proc toolkit.

:knife: Scan memory for secrets and more. Maybe eventually a full /proc toolkit.

Walk x86-64 page tables by hand in qemu and gdb. Decompose a virtual address, follow cr3 through all levels of physical memory, and extract a flag…

This lab demonstrates the exploitation of CVE-2024-24945, a heap corruption vulnerability affecting NGINX. The objective was to understand how memory…

A collection of links related to Linux kernel security and exploitation

Build a database of libc offsets to simplify exploitation

A collection of links related to VMware escape exploits

Introduction to the exploitation of ELF binaries.

Step-by-step walkthrough for exploiting CVE-2015-1328 (OverlayFS) to escalate privileges from a low-privileged user to root on Ubuntu 14.04. Includes…

beginner friendly write-up for the TryHackMe easy level module- polkit:CVE-2021-3560

A collection of samples and material related to process injection


analysis of the sudo buffer overflow affect sudo version <1.8.26 and how to use GCC to compile publicly availible exploits

All Credit to MaherAzzouzi (https://github.com/MaherAzzouzi/CVE-2022-37706-LPE-exploit). This is a copy of the exploit for CTFs

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux


A plugin that provides resources for beginners to learn reverse engineering using Binary Ninja. It automatically installs several other plugins, and…

An updated collection of resources targeting browser-exploitation.