该漏洞存在于 NtQueryInformationToken 函数中，特别是在处理AuthzBasepCopyoutInternalSecurityAttributes 函数时，该漏洞源于内核在操作对象时对锁定机制的不当管理，这一失误可能导致恶意实体意外提升权限。

MarkBind is a tool for generating content-heavy websites from source files in Markdown format

A fork of AFL for fuzzing Windows binaries

A fork of AFL for fuzzing Windows binaries

Binary, coverage-guided fuzzer for Windows, macOS, Linux and Android

🔎 Static code analysis engine to find security issues in code.

💻 C++ Functional Terminal User Interface. ❤️

IDA pro plugin to find crypto constants (and more)

A repository of credential stealer formats

Curated list of project-based tutorials

Simple x86-64 VT-x Hypervisor with EPT Hooking

A curated list of annual cyber security reports

Researching Apple VAS protocol

D2 is a modern diagram scripting language that turns text to diagrams.

Complete list of LPE exploits for Windows (starting from 2023)

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

Dump lsass using only NTAPI functions by hand-crafting Minidump files (without MiniDumpWriteDump!!!)

Obfuscation LLVM 17

Raw data from Threat Intelligence Reports with automatic reports collection and keyword search across thousands of reports

A community driven collection of IDA FLIRT signature files

apk.sh makes reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding and patching an APK.

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

Collection of malware source code for a variety of platforms in an array of different programming languages.

🌱 a fast, batteries-included static-site generator that transforms Markdown content into fully functional websites

Active Directory forensic framework

MSSQL CLR for pentest.

A lightweight JavaScript library for creating particles

CLI tools for forensic investigation of Windows artifacts