Metasploit Framework

The best tool for finding one gadget RCE in libc.so.6

A collection of reverse engineered Apple things, as well as a machine-readable database of Apple hardware

Provide powerful tools for seccomp analysis

A database of vulnerable Ruby Gems

Advisories, proof of concept files and exploits that have been made public by @pedrib.

A small tool that extracts relative URLs from a file.

Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem

Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)

Pentest Lab on OpenStack with Heat, Chef provisioning and Docker

📚 Stuff to read up

A collection of files for adding and leveraging custom properties in BloodHound.

BSidesSF CTF 2017 release

An interactive memory info for pwning / exploiting

Shopify's Enterprise Script Service

Ruby gem to help prevent Server Side Request Forgery

TheFloW's security blog. https://theofficialflow.github.io/

Ansible crash course

ELF patcher implemented in pure Ruby!

Cyber competition scoring engine

Official challenge and writeup repository for RITSEC CTF 2018.

Just a random heap challenge ;)

This project is a website that allows users to create multichoice tests and share them.

Blog