—
Privacy focused NixOS pentesting environment with a customizable desktop and security tools.
This is a write up of the exploit I developed for the Pwn2Own Automotive 2026 competition.
Edit and review GitHub issues and pull requests from the comfort of your favorite editor
CTF framework and exploit development library
Exploit Development and Reverse Engineering with GDB & LLDB Made Easy
A repository with 3 tools for pwn'ing websites with .git repositories available
Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more
(⌐■_■) - Raspberry Pi instrumenting Bettercap for Wi-Fi pwning.
Pentest Report Generator
The best tool for finding one gadget RCE in libc.so.6
linWinPwn is a bash script that streamlines the use of a number of Active Directory tools
Some helpful preload libraries for pwning stuff.
OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hacking environment designed for labs, security enthusiasts, classrooms, CTF, and vulnerability assessment tool targets.
AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.
面向小白用户的 CTF / 逆向 Skills 整合包:自动分流、头脑风暴、教学模式、比赛模式、只提示模式
A list of Capture The Flag (CTF) frameworks, libraries, resources and software for started/experienced CTF players 🚩
Anything about kernel security. CTF kernel pwn, kernel exploit, kernel fuzz and kernel defense paper, kernel debugging technique, kernel CVE debug.
Fully dockerized Linux kernel debugging environment for Linux and MacOS
CTF kernel exploitation notes, PoCs, exploits, and writeups.
Infrastructure powering the pwn.college dojo
AI Native IDE for reverse engineering
A collection of libraries and a TUI to test fiber GPON deployments.
Free, open-source iOS sideloading for Windows. Install any .ipa with just your Apple ID - no jailbreak, no paid developer account.
On-device app-data browser, backup and restore for sideloaded iOS. No jailbreak. No Keychain.
The first ever working custom firmware for the PSX DESR DVRP
Разблокировка полной вычислительной мощности GA102 (CMP90HX) c повышением pcie до gen2. Рекомендуется использовать в паре с аппаратным модом x4 -> x16.
Offensive Linux Privilege Escalation — hands-on study notes: enumeration, sudo/SUID/capabilities, cron & systemd timers, kernel LPEs (DirtyPipe/OverlayFS/PwnKit), container & namespace escapes, and credential mining. Each technique with detection & defenses. CC BY 4.0.
The Exploit Development Trilogy. A free, zero-to-hero guide covering C programming, reverse engineering, and modern memory corruption. Master the stack, heap, ROP, and kernel exploitation.
PWNCUBE v1.0 is a Cubesat hardware based platform for aerospace cybersecurity research
Open-source, self-hosted DAM and brand manager: assets, guidelines as data and brand portals, for your team and AI agents (MCP, REST, CLI).