A curated list of resources (books, tutorials, courses, tools and vulnerable applications) for learning about Exploit Development
wtsxdev/exploit-development 的主要功能包括：Exploit Development, Offensive Security。
wtsxdev/exploit-development 的开源替代品包括： skerkour/black-hat-rust — This project is an offensive security toolkit and development framework for creating memory-safe malware, network… vxunderground/vxug-papers — This project is a centralized repository and research database dedicated to the collection of technical documentation… beefproject/beef — BeEF is a modular security testing environment designed for browser exploitation and web application auditing. It… cobbr/covenant — Covenant is a .NET-based command and control framework designed for red team operations and adversary simulation. It… corelan/corelantraining — This repository contains a few PowerShell and Python scripts:. bigb0sss/osce — Backdooring PE - Weaponizing Your Favorite PE SEH + Egghunter(Manual Encoding) - HP OpenView NNM 7.5 Exploitation.
This project is an offensive security toolkit and development framework for creating memory-safe malware, network scanners, and payload generators. It provides a structured approach to developing exploits, shellcode, and remote access tools. The framework distinguishes itself through the use of no-standard-library environments to generate minimal standalone machine code and shellcode. It also supports the compilation of high-performance logic into WebAssembly for the creation of deceptive web interfaces used in social engineering. Capability areas cover automated vulnerability discovery via
This project is a centralized repository and research database dedicated to the collection of technical documentation and source code concerning offensive security, malware development, and system exploitation. It serves as an archive for security professionals and researchers to study threat actor methodologies and historical security research. The repository functions as a static, version-controlled archive that organizes research papers and code samples into a flat-file directory structure. This approach ensures long-term availability and offline access to the materials, while a decentrali
BeEF is a modular security testing environment designed for browser exploitation and web application auditing. It functions as a platform for security professionals to evaluate client-side defenses by injecting persistent scripts into web browsers, establishing a bidirectional communication channel for remote command execution and data exfiltration. The framework distinguishes itself through its ability to use compromised browser sessions as proxies to conduct internal network reconnaissance, effectively bypassing perimeter security controls. It utilizes an event-driven control interface and
Backdooring PE - Weaponizing Your Favorite PE SEH Egghunter(Manual Encoding) - HP OpenView NNM 7.5 Exploitation