MOVED TO: https://cirosantilli.com/linux-kernel-module-cheat/userland-assembly with code at https://github.com/cirosantilli/linux-kernel-module-cheat/tree/master/userland/arch/x86_64 SEE README. x8…

A cheatsheet for exploiting server-side SVG processors.

A pure Ruby code highlighter that is compatible with Pygments

A curated list of awesome framework-agnostic standalone web components

A full-featured BDD unit testing framework for bash, ksh, zsh, dash and all POSIX shells

Generate shell completions for command_kit commands

Mirror of cisa.gov/kev data files

Tools to process ARM's Machine Readable Architecture Specification

Machine-readable data describing Arm architecture and implementations. Includes JSON descriptions of implemented PMU events.

Exploits written.

Exploits written.

This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

High performance UI layout library in C.

A coverage-guided fuzzer for pure Ruby code and Ruby C extensions

Provides iteration per second benchmarking for Ruby

A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)

Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.

Tracking interesting Linux (and UNIX) malware. Send PRs

Vulnerable server used for learning software exploitation

Vulnerable server used for learning software exploitation

vcsmap is a plugin-based tool to scan public version control systems for sensitive information.

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

Bundle of common passwords targeting RUSSIAN-speaking audience (parsed from big data leaks)

Collection of knowledge about information security

A tool for embedding XXE/XML exploits into different filetypes

A repo to conduct vulnerability enrichment.

Proof-of-concept exploit for CVE-2024-25153.

A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send specially crafted request…

POC FortiOS SSL-VPN buffer overflow vulnerability

CVE-2024-23897