CTF framework and exploit development library

一键生成免杀木马的 shellcode 免杀框架

Python Exploitation is a collection of special tools for providing high quality penetration testing using pure python programming language.

Python low-interaction honeyclient

SHAREM is a shellcode analysis framework, capable of emulating more than 20,000 WinAPIs and virutally all Windows syscalls. It also contains its own custom disassembler, with many innovative features, such as being able to show the deobfuscated disassembly of an encoded shellcode, or integrating emulation data to enhance the disassembly.

Flopz - Firmware Liberation on Python

DrShell is a cutting-edge tool designed for the dynamic management of reverse shell sessions. Whether you are a seasoned security professional, a network administrator, or a cybersecurity enthusiast

Win32 Shellcode CheatSheet: Your visual guide for crafting and understanding shellcode. Ideal for malware, and exploit developers

This repo educates developers about BOF vulnerabilities and provides practical solutions to prevent these risks. It equips developers with knowledge and tools to counter one of the most common security vulnerabilities.

This code is a web scanner tool designed to find vulnerabilities and file upload points on a website. It uses various techniques to bypass security measures and upload files in a hidden manner. In the following, the technical details of the code and the techniques used will be explained.

Scripts, tools and code snippets for exploit development/assembly/shellcoding

Hidden in plain sight! the simplest yet most effectively covert way to obfuscate data (e.g., shellcode), no one can tell gibberish from malicious anymore!

Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.

All CTFs solved in Offensive and Defensive Cyber Security course of Polytechnic of Milan 23/24 edition

Cheap EMUlator: lightweight multi-architecture assembly playground

Buffer Overflow Vulnerability

OWASP ZSC - Shellcode/Obfuscate Code Generator https://www.secologist.com/

Tooling for the OffSec Experienced Pentester (OSEP) and OffSec Exploit Developer (OSED) course

「🛡️」AVs/EDRs Evasion tool