Labs

• https://vulnlab.com

Useful

• https://wiki.vulnlab.com
• resh.py

Shelf

• https://github.com/xct/winssh
• https://github.com/xct/hashgrab
• https://github.com/xct/rcat
• https://github.com/xct/winpspy

Exploits

Recent

• LACTF Rickroll Format String Exploit
• IdekCTF 2023 Typop (ROP, CSU)
• Real World CTF 2023 NonHeanvyFTP (Race Condition)
• ShaktiCTF 2022 PhrackCrack (Heap – House of Force)
• ShaktiCTF 2022 Ropworks (ROP)
• GlacierCTF 2022 (Heap – Fastbin Dup)
• SquareCTF 2022 (Yara / Valgrind)
• Ekoparty 2022 (Windows, ROP
• MTS HW Driver EOP (Windows, Kernel)

Windows Kernel Practice

• Null Pointer Dereference Win7 x64 HEVD
• Pool Overflow Win7 x64 HEVD
• Stack Overflow Win10 , GS, Version 2, Version 3 x64 HEVD
• Type Confusion Win10, Version 2 x64 HEVD
• Use-after-free Win10 x64 HEVD
• Arbitrary Read/Write Win10 , Low Integrity, x64 Gigabyte Driver
• Arbitrary Write Win10 x64 HEVD

Chrome

• StarCTF OOB custom patched Chromium, out-of-bounds access, renderer RCE

Firefox

• Midenios custom patched Firefox, out-of-bounds access, renderer RCE

PowerShell Shell Generator

IP Address

Port

Shellcode Converter

Shellcode to Double Constants

Double Constants to Shellcode