WolfPack combines the capabilities of Terraform and Packer to streamline the deployment of red team redirectors on a large scale.

Windows rootkit designed to work with BYOVD exploits

RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.

Publish C++ vulnerability rules working drafts on github pages

Files for my C++ course participants

Handouts, Exercises, and Source Code Examples for C++ Advanced

Handouts, Exercises, and Source Code Examples for C++ Expert course

Projects for security students

Projects for security students and professionals

LPE exploit for CVE-2023-21768

A Python3 based C2 server to make life of red teamer a bit easier. The payload is capable to bypass all the known antiviruses and endpoints.

Veil 3.1.X (Check version info in Veil at runtime)

iOS 15.0-15.3.1 tethered checkm8 "jailbreak" (rootless is 15.0-15.7 semi-tethered, no tweaks)

A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other objects in the domain.

A collaborative, multi-platform, red teaming framework

Open-Source Shellcode & PE Packer

Public open-source code of malware Stuxnet (aka MyRTUs).

Shikata ga nai (仕方がない) encoder ported into go with several improvements

Venom - A Multi-hop Proxy for Penetration Testers

🌴Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.

A list of resources for those interested in getting started in bug bounties