When exploiting real world software or devices, achieving arbitrary code execution on a system may only be the first step towards total compromise. For high ...

Kam1n0-Plugin-IDA-Pro - The Kam1n0 Assembly Analysis Platform

This talk will present a novel application of a machine learning model and a corresponding tool, asm2vec, for vulnerability discovery. Treating both program disassembly…

Fuze - towards automating exploit generation for arbitrary types of kernel vulnerabilities. Based on Angr, capstone, pwntools, ropgadget, claripy, simuvex. https://t.co/lgjaA6TWDD

Symbolic execution tool. Contribute to trailofbits/manticore development by creating an account on GitHub.

Hardware backdoors in x86 CPUs. Contribute to xoreaxeaxeax/rosenbridge development by creating an account on GitHub.

Meet BrokenType – the font fuzzing toolset that helped me find 39 vulns in the Windows kernel and user-mode Uniscribe library in 2015-2017. It includes a font mutator, generator and loader. Now on GitHub: https://t.co/Z9aDlP7xvp

Project Zero blog: "Windows Exploitation Tricks: Exploiting Arbitrary Object Directory Creation for Local Elevation of Privilege" by @tiraniddo - https://t.co/YxONKNlgc2

WindowsDefenderTools - scripts for reverse engineering of Windows Defender Antivirus' binary emulator. Based on IDAPython. https://t.co/kVW2WgHQEr

A full analysis of the #Microsoft #Exchange code execution bug released today (CVE-2018-8302) is now available. Includes a video demo of the exploit in action. Read the details at https://t.co/evpdEBMP8G.

The FireEye Labs Advanced Reverse Engineering (FLARE) team’s annual reverse engineering challenge will start at 8:00 p.m. ET on Aug. 24, 2018.

Posted by Natalie Silvanovich, Project Zero WebAssembly is a format that allows code written in assembly-like instructions to be run from J...

Yet Another YARA rule Generator. Contribute to jimmy-sonny/YaYaGen development by creating an account on GitHub.

Облако Mail.Ru - это ваше персональное надежное хранилище в интернете. Все нужные файлы всегда под рукой, доступны в любой точке мира с компьютера или смартфона.

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter. - infosecn1nja/Red-Teaming-Toolkit

Burp is getting a brand new REST API, which can be used by other tools to integrate with Burp Suite: In the initial release, the REST API supports launching vulnerability scans and obtaining the resul

Cool writeup about solving the #defcon26 badge. https://t.co/L8EsRpcYQ5 #badglife #defcon

In an effort to share more of my source code publicly, I've uploaded Bochspwn Reloaded (the kernel infoleak detector) to GitHub. For those interested, it may shed some light on the implementation details of the project. See: https://t.co/hnPva5FDs6