Workshop material for a Windows Attack Surface Analysis Workshop

A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.

You Need A White Apple !

a general-purpose fuzzer

CTFs as you need them

Reverse engineering and pentesting for Android applications

Your Swiss Army knife to analyze malicious web traffic based on the popular Fiddler web debugger.

Log info / warning / error messages in C for Linux and Windows

Source Code Security Audit (源代码安全审计)

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

A list of public penetration test reports published by several consulting firms and academic security groups.

Network Infrastructure Penetration Testing Tool

Just some random stuff for AppLocker

Robust and practical application control for Windows

Privilege Escalation Project - Windows / Linux / Mac

📚 Yet another CTF writeups repository. PWN and RE tasks

A combination of an IDAPython Plugin and a control version system that result in a new reverse engineering collaborative addon for IDA Pro. By

WiFi arsenal

hardenedlinux.org website

HackSys Extreme Vulnerable Driver (HEVD) - Windows & Linux

Memory Debugger for Windows, Linux, Mac, and Android

The Microsoft Build Engine (MSBuild) is the build platform for .NET and Visual Studio.

WDF makes it easy to write high-quality Windows drivers

This repo contains driver samples prepared for use with Microsoft Visual Studio and the Windows Driver Kit (WDK). It contains both Universal Windows Driver and desktop-only driver samples.

javascript runtime ( JSRT ) project for windows , based on chakra

Stuff you might use when exploiting software

windows syscall table from xp ~ 10 rs4

An exploit for CVE-2015-1538-1 - Google Stagefright ‘stsc’ MP4 Atom Integer Overflow Remote Code Execution

Web path scanner

A DNS meta-query spider that enumerates DNS records, and subdomains.