🦄 A curated list of the awesome resources about the Vulnerability Research

🎯 Command Injection Payload List

afl-unicorn lets you fuzz any piece of binary that can be emulated by Unicorn Engine.

Subaru StarLink persistent root code execution.

Attack surface mapping

Apache Shiro 反序列化漏洞检测与利用工具

Canadian Furious Beaver is a tool for hijacking IRPs handler in Windows drivers, and facilitating the process of analyzing Windows drivers for vulnerabilities

VerSprite Security Research

VULNRΞPO - Free vulnerability report generator and repository end-to-end encrypted, security report maker, vulnerability report builder. Complete templates of issues, CWE, CVE, AES encryption, Nmap/Nessus/Burp/OpenVAS issues import, Jira export, TXT/HTML/PDF report, attachments, automatic changelog and statistics, vulnerability management.

Driver Initial Reconnaissance Tool

Vulnerabilities of Goby supported with exploitation.

A project that uses Binary Ninja and GRAKN.AI to perform static analysis on binary files with the goal of identifying bugs in software.

Dockerized WebKit Dev/Research Environment

xss vulnerable chat used to learn how to perform and protect against xss attacks

Source code for COLING 2020 paper "Enhancing Neural Models with Asymmetrical Vulnerability via Adversarial Attack"

Collection of my CTF writeups and Security Research. Usually only do Web/Misc/Forensics. Read files under /_posts/ for the .MD files

Projects from the blog

My security blog

PoC code for vulnerabilities on the OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3).

NVD-NIST Parser is a parser service. It parses to NVD source and information to you about your product vulnerabilities.

Vulnerability Research notes

found as WordPress plugin

Vulnerabilities discovered.