epi

vec2text. utilities for decoding deep representations (like sentence embeddings) back to text

Fabric. Fabric is an open-source framework for augmenting humans using AI. It provides a modular system for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.

linux-luminarium. Shell

lve. A repository of Language Model Vulnerabilities and Exposures (LVEs).

JS-Tap. JavaScript beacons and C2 to be used for XSS payload or post exploitation implants on webapp servers or desktop software to monitor users and maintain persistence. Browser extension, electron app, and node/bun app implants are included.

realm. Realm is a cross platform Red Team engagement platform with a focus on automation and reliability.

sj. A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.

arsenal. Arsenal is just a quick inventory and launcher for hacking programs

bpfhacks. eBPF hacks

python-best-practices-cookiecutter. Python best practices project cookiecutter 🍪

Lucid. An educational Bochs-based snapshot fuzzer project

websec-answers. Websec interview questions by tib3rius answered

qbindiff. Quarkslab Bindiffer but not only !

hw-hacking-lab. VSS Hardware Hacking Wiki and Blog Entries

spacedrive. Spacedrive is an open source cross-platform file explorer, powered by a virtual distributed filesystem written in Rust.

ghidriff. Python Command-Line Ghidra Binary Diffing Engine

heaptruffle. Mine URLs from Browser's Heap Snapshot for fun and profit

cvc5. cvc5 is an open-source automatic theorem prover for Satisfiability Modulo Theories (SMT) problems.

CVE-2023-4911. CVE-2023-4911 proof of concept

AD_Miner. AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses

tsffs. A snapshotting, coverage-guided fuzzer for software (UEFI, Kernel, firmware, BIOS) built on SIMICS

CreuSAT. CreuSAT - A formally verified SAT solver written in Rust and verified with Creusot.

CS7038-Malware-Analysis. Course Repository for University of Cincinnati Malware Analysis Class (CS[567]038)

pytest-textual-snapshot. Snapshot testing for Textual applications

symrustc. SymRustC is a hybrid fuzzer for Rust combining concolic execution using SymCC and fuzzing using LibAFL.

angr. A powerful and user-friendly binary analysis platform!

ghidralligator. C++

symsan. A LLVM Sanitizer for Symbolic Tracing

ASPFuzz. ASPFuzz: Fuzzing the AMD SP's ROM bootloader with LibAFL using QEMU full-system emulation

fuguex-core. A binary analysis framework written in Rust.

snapchange. Lightweight fuzzing of a memory snapshot using KVM

angrgdb. Use angr inside GDB. Create an angr state from the current debugger state.

ShadowClone. Unleash the power of cloud

AutoGPT. AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.

AgentGPT. 🤖 Assemble, configure, and deploy autonomous AI Agents in your browser.

SiMBA-. Port of MBA Solver SiMBA to C/C++ (MBA deobfuscation in real world applications)

binsync. A reversing plugin for cross-decompiler collaboration, built on git.

obfuscation_detection. Binary Ninja plugin to identify obfuscated code and other interesting code constructs

rellic. Rellic produces goto-free C output from LLVM bitcode

llvm-tutor. A collection of out-of-tree LLVM passes for teaching and learning

llvm-plugin-rs. Out-of-tree LLVM passes in Rust

retdec. RetDec is a retargetable machine-code decompiler based on LLVM.

loki. Hardening code obfuscation against automated attacks

semgrep. Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

Hypervisor-101-in-Rust. The materials of "Hypervisor 101 in Rust", a one-day long course, to quickly learn hardware-assisted virtualization technology and its application for high-performance fuzzing on Intel/AMD processors.

cargo-machete. Remove unused Rust dependencies with this one weird trick!

ratatui. A Rust crate for cooking up terminal user interfaces (TUIs) 👨‍🍳🐀 https://ratatui.rs

Awesome-Binary-Similarity. An awesome & curated list of binary code similarity papers

fugue-core. A binary analysis framework written in Rust.

capital. A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Security vulnerabilities within your own API Security CTF.

icicle-emu. Core emulator components for Icicle

zerus. Lightweight tool for creating project-specific and/or general offline crates.io mirrors

spotbot. Configuration tool for spotmicro

claripy. An abstraction layer for constraint solvers.

ockam. Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.

tinysh. Rust

vheap. Extendable Visualization & Exploitation tool for glibc heap

remill. Library for lifting machine code to LLVM bitcode

OpenBTS. GSM+GPRS Radio Access Network Node reloaded for 2024-2025 for newest UHD drivers and supporting Ubuntu 22.04 & 24.04

tinyinst-rs. Rust bindings for googleprojectzero/TinyInst

cargo-libafl. Fuzz Rust code with LibAFL

lemonade. A debugger for Linux in Rust

AFLplusplus. The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

blink. tiniest x86-64-linux emulator

codon. A high-performance, zero-overhead, extensible Python compiler with built-in NumPy support

butterfly. LibAFL components for stateful fuzzing

metlo. Metlo is an open-source API security platform.

graudit. grep rough audit - source code auditing tool

iai. Experimental one-shot benchmarking/profiling harness for Rust

vmlinux-to-elf. A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)

eviltree. A python3 remake of the classic "tree" command with the additional feature of searching for user provided keywords/regex in files, highlighting those that contain matches.

memfd-exec. Execute binaries straight from memory, without touching disk, with a friendly interface!

xx. The xx file format. Turn your hex dumps into art, then into binary data.

chafa. 📺🗿 Terminal graphics for the 21st century.

chameleon. Rust

happy-birthday. Wish your friend/loved-ones happy birthday in a nerdy way.

awesome-symbolic-execution. A curated list of awesome symbolic execution resources including essential research papers, lectures, videos, and tools.

lightkeeper. Java

rusty_v8. Rust bindings for the V8 JavaScript engine

gorilla. tool for generating wordlists or extending an existing one using mutations.

fuzzable. Framework for Automating Fuzzable Target Discovery with Static Analysis.

the-poor-mans-obfuscator. Binary & scripts associated with "The Poor Man's Obfuscator" presentation

leetcode. Leetcode solutions

xnLinkFinder. A python tool used to discover endpoints, potential parameters, a target specific wordlist for a given target and secrets

auditd. Best Practice Auditd Configuration

binaryninja-api. Public API, examples, documentation and issues for Binary Ninja

beautify-github-profile. This repository will assist you in creating a more beautiful and appealing github profile, and you will have access to a comprehensive range of tools and tutorials for beautifying your github profile. 🪄 ⭐

kAFL. A fuzzer for full VM kernel/driver targets

tabled. An easy to use library for pretty print tables of Rust structs and enums.

tiptop. :desktop_computer: Command-line system monitoring

vendor-android-cves. Collections of my POCs for android vendor CVEs

rusty-memory-loadlibrary. Load DLLs from memory with rust

rust-logo-3d.

fantoccini. A high-level API for programmatically interacting with web pages through WebDriver.

pyafl_qemu_trace. pip-installable afl-qemu-trace python package with batteries

xpid. Linux Process Discovery. C Library, Go bindings, Runtime.

maat. Open-source symbolic execution framework: https://maat.re

furo. A clean customizable documentation theme for Sphinx

goldberg. A Rust-based obfuscation macro library!

FitM. FitM, the Fuzzer in the Middle, can fuzz client and server binaries at the same time using userspace snapshot-fuzzing and network emulation. It's fast and comparably easy to set up.

mdec. Decompilation as a Service. Explore multiple decompilers and compare their output with minimal effort. Upload binary, get decompilation.

FirmWire. FirmWire is a full-system baseband firmware emulation platform for fuzzing, debugging, and root-cause analysis of smartphone baseband firmwares

Reverse-Engineering. A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures.

multicompiler. LLVM-based compiler to create artificial software diversity to protect software from code-reuse attacks.

awesome-reverse-engineering. Reverse Engineering Resources About All Platforms(Windows/Linux/macOS/Android/iOS/IoT) And Every Aspect! (More than 3500 open source tools and 2300 posts&videos)

nyx-net. Python

assay. A super powered testing macro for Rust

makeit. Zero-overhead type-safe builder pattern `derive` macro for your Rust structs

httpmock. HTTP mocking library for Rust

x8. Hidden parameters discovery suite

clap. A full featured, fast Command Line Argument Parser for Rust

systabs. Tool to produce system call tables from Linux source code.

rust-artwork. Official artwork for the Rust project.

tio. A serial device I/O tool

shelf-loader-poc. Rust

pwninit. pwninit - automate starting binary exploit challenges

SMBGhost_RCE_PoC. Python

AFLTriage. Debugger-based crash triage tool

fact_extractor. Standalone Utility for FACT-like extraction

rust-raspberrypi-OS-tutorials. :books: Learn to write an embedded OS in Rust :crab:

Development_Documents. Development Documents for MTK chipsets

emba. EMBA - The firmware security analyzer

arm_now. arm_now is a qemu powered tool that allows instant setup of virtual machines on arm cpu, mips, powerpc, nios2, x86 and more, for reverse, exploit, fuzzing and programming purpose.

decomp2dbg. A plugin to introduce interactive symbols into your debugger from your decompiler

BinDiffHelper. Ghidra Extension to integrate BinDiff for function matching

panda-rs. Rust bindings for PANDA and libpanda

diaphora. Diaphora, the most advanced Free and Open Source program diffing tool.

OffensiveRust. Rust Weaponization for Red Team Engagements.

weggli. weggli is a fast and robust semantic search tool for C and C++ codebases. It is designed to help security researchers identify interesting functionality in large codebases.

radius2. radius2 is a fast binary emulation and symbolic execution framework using radare2

objexplore. A terminal UI to inspect and explore Python objects

klask. Automatically create GUI applications from clap3 apps

Fuzzing101. An step by step fuzzing tutorial. A GitHub Security Lab initiative

NotQuite0DayFriday. This is a repo which documents real bugs in real software to illustrate trends, learn how to prevent or find them more quickly.

ghidra_scripts. Port of devttyS0's IDA plugins to the Ghidra plugin framework, new plugins as well.

IoTGoat. IoTGoat is a deliberately insecure firmware created to educate software developers and security professionals with testing commonly found vulnerabilities in IoT devices.

makefiletutorial. Learn make by example

IoTGoat. IoTGoat is a deliberately insecure firmware based on OpenWrt.

awesome-angr. A collection of resources/tools and analyses for the angr binary analysis framework.

routerosbackuptools. Tools to encrypt/decrypt and pack/unpack RouterOS v6.13+ backup files

cwe_checker. cwe_checker finds vulnerable patterns in binary executables

qiling. A True Instrumentable Binary Emulation Framework

vermin. Concurrently detect the minimum Python versions needed to run code

LibAFL. Advanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, ...

lighthouse. A Coverage Explorer for Reverse Engineers

autoharness. A tool that automatically creates fuzzing harnesses based on a library

textual. The lean application framework for Python. Build sophisticated user interfaces with a simple Python API. Run your apps in the terminal and a web browser.

Reddit_Sentiment_Trader. Python

one_gadget. The best tool for finding one gadget RCE in libc.so.6

kiterunner. Contextual Content Discovery Tool

pagebuster. PageBuster - dump all executable pages of packed processes.

metagoofil. Search Google and download specific file types

star-history. The de facto GitHub star history graph.

reverse-shell-generator. Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)

zombieant. Zombie Ant Farm: Primitives and Offensive Tooling for Linux EDR evasion.

bdvl. bdvl

Diamorphine. LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)

rich. Rich is a Python library for rich text and beautiful formatting in the terminal.

lsd. The next gen ls command

pyo3. Rust bindings for the Python interpreter

Cexigua. Linux based inter-process code injection without ptrace(2)

gorsh. A toy CTF Golang Reverse Shell w/ a Tmux-driven psuedo-C2 Interface

plugin-system-example. Example design of executable with `dylib`-based runtime plugin system in Rust, `libloading` used

c2rust. Migrate C code to Rust

binja-rs. Some Rust bindings for Binary Ninja

hiring-without-whiteboards. ⭐️ Companies that don't have a broken hiring process

backoff. Exponential backoff and retry for Rust.

crackq. CrackQ: A Python Hashcat cracking queue system

fuzzyhash-rs. Pure Rust fuzzy hash implementation

kbd-audio. 🎤⌨️ Acoustic keyboard eavesdropping

ImHex. 🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

Infosec-Deals. Ongoing Infosec Deals

jarm. Python

obfuscator.

how2heap. A repository for learning various heap exploitation techniques.

slides. Presentations for programming courses

Ciphey. ⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

pb-jelly. A protobuf code generation framework for the Rust language developed at Dropbox.

nightmare. Python

easy_rust. Rust explained using easy English

jinja-template. Jinja Template - Free & commercial projects | AppSeed

recon-pipeline. An automated target reconnaissance pipeline.

BurpSuite_payloads. Payloads to be used with Burp Suite Intruder. (Originally found on swisskeyrepo-PayloadsAllTheThings)

PEzor. Open-Source Shellcode & PE Packer

scripthunter. Tool to find JavaScript files on Websites

SharpCollection. Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

kerberoast. Kerberoast attack -pure python-

sliver. Adversary Emulation Framework

gitscraper. A tool which scrapes public github repositories for common naming conventions in variables, folders and files

gaussrf. Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl and Filter Urls With OpenRedirection or SSRF Parameters.

TJ-JPT. This repo contains my pentesting template that I have used in PWK and for current assessments. The template has been formatted to be used in Joplin

Gf-Patterns. GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

CVE-2019-1579. Python

bounty-targets-data. This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

100DaysHackerArt.

postMessage-tracker. A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

cave_miner. Search for code cave in all binaries

sickle-pdk. Sickle - Payload Development Kit

CTP-OSCE. Scripts I used during CTP

boofuzz. A fork and successor of the Sulley Fuzzing Framework