Shannon Lite is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities bef…

Fuzzing Browsers

A hacker's userspace TCP/IP stack

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

A study of V8 internals.

Content-Type Research

Collection of CTF Web challenges I made

TinyLinux mini linux kernel implmentation from scratch

Tutorial for writing kernel exploits

Archive for acez.re blog.

Pwn stuff.

A Python script designed to monitor bug bounty programs for any changes and promptly notify users.

Collection of PoC and offensive techniques used by the BlackArrow Red Team

CodeQL zero to hero blog post series challenges

Slides about HyperDbg

Reverse engineering framework in Python

Tutorials, examples, discussions, research proposals, and other resources related to fuzzing

🐍 A toolkit for testing, tweaking and cracking JSON Web Tokens

NAT Slipstreaming allows an attacker to remotely access any TCP/UDP services bound to a victim machine, bypassing the victim’s NAT/firewall, just by anyone on the victim's network visiting a website

Exploiting misconfigured firebase databases

Web Component extending IFrame to bypass X-Frame-Options: deny/sameorigin

DOM XSS scanner for Single Page Applications

WebLogic Insecure Deserialization - CVE-2019-2725 payload builder & exploit

Fetches javascript file from a list of URLS or subdomains.