Stars
176 vulnerabilities in Samsung preinstalled Android apps
CTF kernel exploitation notes, PoCs, exploits, and writeups.
A list of Free Software network services and web applications which can be hosted on your own servers
various docs (that are interesting, or not, depending on the point of view...)
CodeQL zero to hero blog post series challenges
A curated list of awesome of the Foundry development framework.
Privilege Escalation Enumeration Script for Windows
weggli is a fast and robust semantic search tool for C and C++ codebases. It is designed to help security researchers identify interesting functionality in large codebases.
Information about web3 security and programming tutorials/tools
a collection of EVM tracing information for easy reference
Here you can find write ups for iOS Vulnerabilities that have been released.
"Can I take over DNS?" — a list of DNS providers and how to claim vulnerable domains.
A one-stop shop for blockchain security researchers looking for educational material and alpha to level-up and get an edge on competition. This is not your standard roadmap, top 10 vulnerabilities,…
This repo contains write ups of vulnerabilities I've found and exploits I've publicly developed.
This is an online course where you can learn and master the skill of low-level performance analysis and tuning.
curation of all(most) immunefi bug bounty writeups I could find(till now)
Command-line client for WebSockets, like netcat (or curl) for ws:// with advanced socat-like functions
Linux kernel CVE exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environment anymore.
Awesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.
Lightweight fuzzing of a memory snapshot using KVM
A binary lifter and analysis framework for Ethereum smart contracts
Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.
Reproduce DeFi hacked incidents using Foundry.
Solidity contract visualisation tool