🦄 A curated list of the awesome resources about the Vulnerability Research

🎯 Command Injection Payload List

afl-unicorn lets you fuzz any piece of binary that can be emulated by Unicorn Engine.

Subaru StarLink persistent root code execution.

Attack surface mapping

Apache Shiro 反序列化漏洞检测与利用工具

Canadian Furious Beaver is a tool for hijacking IRPs handler in Windows drivers, and facilitating the process of analyzing Windows drivers for vulnerabilities

VerSprite Security Research

VULNRΞPO - Free vulnerability report generator and repository end-to-end encrypted, security report maker, vulnerability report builder. Complete templates of issues, CWE, CVE, AES encryption, Nessus/Burp/OpenVAS issues import, Jira export, TXT/HTML/PDF report, attachments, automatic changelog and statistics, vulnerability management.

Driver Initial Reconnaissance Tool

A project that uses Binary Ninja and GRAKN.AI to perform static analysis on binary files with the goal of identifying bugs in software.

Vulnerabilities of Goby supported with exploitation.

Dockerized WebKit Dev/Research Environment

xss vulnerable chat used to learn how to perform and protect against xss attacks

Collection of my CTF writeups and Security Research. Usually only do Web/Misc/Forensics. Read files under /_posts/ for the .MD files

Projects from the blog

PoC code for vulnerabilities on the OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3).

Vulnerabilities discovered.

My security blog

Vulnerability Research notes

found as WordPress plugin