KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#developer-tools #claude-code #codex #typescript #ai-agents #dsh #dsh-plugin #deepseek-harness #ai-agent #mcp #agent-skills #macos

Scuffed_Low_Level_Stash

★ 106 Open GitHub ↗

Stash for Binary Exploitation and Reverse Engineering Resources

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# 🔺 Scuffed Low Level Stash 🔺

### **Follow me:** [Twitter - @0xRoman1](https://twitter.com/0xroman1)

***Scuffed Stash for everything Binary Exploitation and Reverse Engineering related***

![pepe hax](https://media1.tenor.com/images/1fc0947e03ba2626327027a5f423fdc9/tenor.gif)

## 📢 Introductory Information

**Here are some recommended recourses to browse through if you are just starting off.**

[What is x86-64](https://en.wikipedia.org/wiki/X86-64)

[What is the x64 Architecture](https://docs.microsoft.com/en-us/windows-hardware/drivers/debugger/x64-architecture?redirectedfrom=MSDN)

[Assembly Language Book](https://www.syncfusion.com/ebooks/assemblylanguage)

[AT&T Syntax versus Intel Syntax](http://web.mit.edu/rhel-doc/3/rhel-as-en-3/i386-syntax.html)

[X86 Assembly/GAS Syntax](https://en.wikibooks.org/wiki/X86_Assembly/GAS_Syntax)

[x86 and amd64 instruction reference](https://www.felixcloutier.com/x86/index.html)

[Understanding the differences between 8bit, 16bit, 32bit, and 64bit](https://www.youtube.com/watch?v=_SkpnG571z8&ab_channel=ArrowElectronics)

[LordNoteworthy CPU Internals](https://github.com/LordNoteworthy/cpu-internals)

[FLAGS register](https://en.wikipedia.org/wiki/FLAGS_register)

[Stack Frames and how they work](https://www.cs.rutgers.edu/~pxk/419/notes/frames.html)

[Anatomy of a Program in Memory](https://manybutfinite.com/post/anatomy-of-a-program-in-memory/)

[What is NX?](http://index-of.es/EBooks/NX-bit.pdf)

[What is DEP?](https://docs.microsoft.com/en-us/windows/win32/memory/data-execution-prevention)

[What are Stack Canaries?](https://access.redhat.com/blogs/766093/posts/3548631)

[What does PIE Mean?](https://access.redhat.com/blogs/766093/posts/1975793)

[What is ASLR?](https://en.wikipedia.org/wiki/Address_space_layout_randomization)

[Virtual Memory and Address Translation](https://www.cs.utexas.edu/users/witchel/372/lectures/15.VirtualMemory.pdf)

[PC Assembly Language](https://pacman128.github.io/static/pcasm-book.pdf)

[Visual Studio Code Assembly](https://github.com/newtonsart/vscode-assembly)

[Exploit a basic buffer overflow](https://myexperiments.io/exploit-basic-buffer-overflow.html)

[Risc-V resources](https://abolish.technology/risc-v)

## 💡 Tutorials/Courses

**Here are some great free courses and tutorials. The first 5 links contain some great information.**

[Nightmare](https://github.com/guyinatuxedo/nightmare)

[Nightmare Book](https://guyinatuxedo.github.io/)

[BinExp Course](https://github.com/r0hi7/BinExp)

[Offensive Software Exploitation (OSE) Course](https://github.com/ashemery/exploitation-course)

[Modern Binary Exploitation - CSCI 4968](http://security.cs.rpi.edu/courses/binexp-spring2015/)

[PWN College](https://pwn.college/)

[Exploit Education](http://exploit.education/)

[OpenSecurityTraining](http://opensecuritytraining.info/Training.html)

[Let's Learn x86-64 Assembly!](https://gpfault.net/posts/asm-tut-0.txt.html)

[x86 Assembly Crash Course](https://www.youtube.com/watch?v=75gBFiFtAb8)

[A Crash Course in x86 Assembly for Reverse Engineers](https://sensepost.com/blogstatic/2014/01/SensePost_crash_course_in_x86_assembly-.pdf)

[x86-64 Assembly Language Programming with Ubuntu](http://www.egr.unlv.edu/~ed/assembly64.pdf)

[TryHackMe x86-64 Assembly Documentation](https://drive.google.com/file/d/1maTcdquyqnZCIcJO7jLtt4cNHuRQuK4x/view)

[Quick Guide to Assembly in 161](https://inst.eecs.berkeley.edu/~cs161/sp15/discussions/dis06-assembly.pdf)

[Z0F-Course on Reverse Engineering](https://github.com/0xZ0F/Z0FCourse_ReverseEngineering)

[Fuzzy Security](https://www.fuzzysecurity.com/tutorials.html)

[Exploit Development Community Course](https://web.archive.org/web/20170704144922/http://expdev-kiuhnm.rhcloud.com/2015/05/11/contents/)

[NASM Tutorial](https://cs.lmu.edu/~ray/notes/nasmtutorial/)

[Introduction to Computer Organization: ARM Assembly Language Using the Raspberry Pi](http://bob.cs.sonoma.edu/IntroCompOrg-RPi/intro-co-rpi.html)

[A gentle introduction to multithreading](https://www.internalpointers.com/post/gentle-introduction-multithreading)

[Abatchy's Blog](https://www.abatchy.com/)

[Connor Mcgarr's Blog](https://connormcgarr.github.io/)

[SEH Based Exploits](https://www.corelan.be/index.php/2009/07/25/writing-buffer-overflow-exploits-a-quick-and-basic-tutorial-part-3-seh/)

[COM Hijacking for Lateral Movement](https://ijustwannared.team/2020/05/05/com-hijacking-for-lateral-movement/)

[Exploit Mitigation Techniques - Stack Canaries](https://0x00sec.org/t/exploit-mitigation-techniques-stack-canaries/5085)

[0ctf babystack with return-to dl-resolve](https://gist.github.com/ricardo2197/8c7f6f5b8950ed6771c1cd3a116f7e62)

[Format String Exploitation-Tutorial](https://www.exploit-db.com/docs/english/28476-linux-format-string-exploitation.pdf)

[ARM64 Reversing and Exploitation](http://highaltitudehacks.com/2020/09/05/arm64-reversing-and-exploitation-part-1-arm-instruction-set-heap-overflow/)

## 🐧 Linux Exploitation

[Linux System Call Table 32 Bit](https://web.archive.org/web/20191019065232/https://syscalls.kernelgrok.com/)

[Linux System Call Table 64 Bit](http://blog.rchapman.org/posts/Linux_System_Call_Table_for_x86_64/)

[A gentle introduction to Linux Kernel fuzzing](https://blog.cloudflare.com/a-gentle-introduction-to-linux-kernel-fuzzing/)

[The never ending problems of local ASLR holes in Linux](https://blog.blazeinfosec.com/the-never-ending-problems-of-local-aslr-holes-in-linux/amp/?__twitter_impression=true)

[Unleashing Use-After-Free Vulnerabilities in Linux Kernel](https://gts3.org/~wen/assets/papers/xu:collision-slides.pdf)

[Exploiting A Use-After-Free With radare2 - CTF Challenge](https://bananamafia.dev/post/uaf-1/)

## 🌆 Windows Exploitation

[Windows Exploitation Resources](https://github.com/FULLSHADE/WindowsExploitationResources)

[Buffer overflow Windows exploit development practice - 50 proof of concepts](https://github.com/FULLSHADE/OSCE)

[An In-Depth Look into the Win32 Portable Executable File Format](http://www.delphibasics.info/home/delphibasicsarticles/anin-depthlookintothewin32portableexecutablefileformat-part1)

[Basics of Windows shellcode writing](https://idafchev.github.io/exploit/2017/09/26/writing_windows_shellcode.html)

[Understanding Windows Shellcode](http://www.hick.org/code/skape/papers/win32-shellcode.pdf)

[Bypassing Windows Hardware-enforced Data Execution Prevention](http://uninformed.org/?v=2&a=4)

[A Beginner’s Guide to Windows Shellcode Execution Techniques](https://www.contextis.com/en/blog/a-beginners-guide-to-windows-shellcode-execution-techniques#When:14:57:00Z)

[Windows 10 Mitigation Improvements](https://www.blackhat.com/docs/us-16/materials/us-16-Weston-Windows-10-Mitigation-Improvements.pdf)

[Mitigating arbitrary native code execution in Microsoft Edge](https://blogs.windows.com/msedgedev/2017/02/23/mitigating-arbitrary-native-code-execution/)

[Bypassing Control Flow Guard in Windows 10](https://improsec.com/tech-blog/bypassing-control-flow-guard-in-windows-10)

[Bypassing Mitigations by Attacking JIT Server in Microsoft Edge](https://googleprojectzero.blogspot.com/2018/05/bypassing-mitigations-by-attacking-jit.html?m=1)

[Understanding type confusion vulnerabilities](https://www.microsoft.com/security/blog/2015/06/17/understanding-type-confusion-vulnerabilities-cve-2015-0336/)

[Kernel-mode Payloads on Windows](http://www.uninformed.org/?v=3&a=4&t=pdf)

[Windows SMEP bypass](https://www.coresecurity.com/core-labs/publications/windows-smep-bypass-us)

[Kernel Hacking With HEVD](https://sizzop.github.io/2016/07/07/kernel-hacking-with-hevd-part-3.html)

[DLL Injection Using LoadLibrary in C](https://arvanaghi.com/blog/dll-injection-using-loadlibrary-in-C/)

[Use After Free](https://rootkits.xyz/blog/2018/04/kernel-use-after-free/)

## 🤖 Return Oriented Programming

[Return Oriented Programming Techniques](https://steemit.com/ctf/@austinhudson/return-oriented-programming-techniques)

[Deep Dive into ROP Payload Analysis](https://www.exploit-db.com/docs/english/35355-deep-dive-into-rop-payload-analysis.pdf)

[Return Oriented Programming Tetzank Guide](https://tetzank.github.io/posts/return-oriented-programming/)

[Return-into-libc without Function Calls](https://hovav.net/ucsd/dist/geometry.pdf)

[Chaining DEP with ROP](https://www.corelan.be/index.php/2010/06/16/exploit-writing-tutorial-part-10-chaining-dep-with-rop-the-rubikstm-cube/)

[return-to-csu: A New Method to Bypass 64-bit Linux ASLR](https://i.blackhat.com/briefings/asia/2018/asia-18-Marco-return-to-csu-a-new-method-to-bypass-the-64-bit-Linux-ASLR-wp.pdf)

[ROP Emporium - ret2csu](https://jasper.la/posts/ropemporium-8-ret2csu/)

[Framing Signals—A Return to Portable Shellcode](https://www.cs.vu.nl/~herbertb/papers/srop_sp14.pdf)

[Slides for Framing Signals—A Return to Portable Shellcode](https://tc.gts3.org/cs8803/2014/r/srop-slides.pdf)

[SROP Exploitation with radare2](https://bananamafia.dev/post/srop/)

[Sigreturn-Oriented Programming](https://amriunix.com/post/sigreturn-oriented-programming-srop/)

[ret2dlresolve](https://www.da.vidbuchanan.co.uk/blog/0CTF-2018-babystack-ret2dlresolve.html)

[Jump-Oriented Programming](https://www.comp.nus.edu.sg/~liangzk/papers/asiaccs11.pdf)

[Utilizing Code Reuse/ROP in PHP Application Exploits](https://owasp.org/www-pdf-archive/Utilizing-Code-Reuse-Or-Return-Oriented-Programming-In-PHP-Application-Exploits.pdf)

## 🤸 Heap Exploitation

[Heap Exploitation Book](https://heap-exploitation.dhavalkapil.com/)

[Understanding the Low Fragmentation Heap](http://illmatics.com/Understanding_the_LFH.pdf)

[Heap Overflows for Humans](http://repository.root-me.org/Exploitation%20-%20Syst%C3%A8me/Microsoft/EN%20-%20Heap%20Bug%20-%20Heap%20Overflows%20For%20Humans.pdf)

[how2heap](https://github.com/shellphish/how2heap)

[Linux Heap TCache Poisoning](https://drive.google.com/file/d/1XpdruvtC1qW0OKLxO8FaqU9XCl8O_SON/view)

[Remote Code Execution via Tcache Poisoning](https://youtu.be/43ewpRBIRgA)

[Applying Return Oriented and Jump Oriented Programming Exploitation Techniques with Heap Spraying](http://acta.uni-obuda.hu//Erdodi_61.pdf)

## 💻 Programming

[Assembly’s Perspective of C](https://blog.stephenmarz.com/2020/05/20/assemblys-perspective/)

[Creating a Rootkit to Learn C](https://h0mbre.github.io/Learn-C-By-Creating-A-Rootkit/#)

[The 5-Minute Guide to C Pointers](https://denniskubes.com/2017/01/24/the-5-minute-guide-to-c-pointers/)

## 🔄 Reverse Engineering

[RE Reading List](https://github.com/onethawt/reverseengineering-reading-list)

[IDAPython](https://magiclantern.fandom.com/wiki/IDAPython)

[IDAPython Book](https://leanpub.com/IDAPython-Book)

[A journey into Radare 2](https://www.megabeets.net/a-journey-into-radare-2-part-1/)

[Introduction To Reverse Engineering With Radare2](https://www.youtube.com/watch?v=LAkYW5ixvhg&ab_channel=TobalJackson)

[Cutter RE Platform Powered by Radare2](https://cutter.re/)

[Reverse Engineering Resources](https://github.com/wtsxDev/reverse-engineering)

[Getting Started with Reverse Engineering](https://lospi.net/developing/software/software%20engineering/reverse%20engineering/assembly/2015/03/06/reversing-with-ida.html)

[Reverse Engineering for Beginners](https://beginners.re/)

[Malware Unicorn Reverse Engineering 101](https://malwareunicorn.org/workshops/re101.html#0)

[Applied Reverse Engineering Series](https://revers.engineering/applied-reverse-engineering-series/)

[Reverse Engineering Videos](https://www.youtube.com/user/OpenSecurityTraining/playlists)

[Malware Analysis For Hedgehogs](https://struppigel.blogspot.com/2017/06/training-1-file-type-analysis-and-code.html?view=sidebar)

[Python for Reverse Engineering](https://icyphox.sh/blog/python-for-re-1/)

[Knockin’ on Heaven’s Gate – Dynamic Processor Mode Switching](http://rce.co/knockin-on-heavens-gate-dynamic-processor-mode-switching/)

## 🛎️ Useful Slides

[The info leak era on software exploitation](https://media.blackhat.com/bh-us-12/Briefings/Serna/BH_US_12_Serna_Leak_Era_Slides.pdf)

[Case Study of VMware Guest-To-Host escape vulnrabilities](https://www.blackhat.com/docs/eu-17/materials/eu-17-Mandal-The-Great-Escapes-Of-Vmware-A-Retrospective-Case-Study-Of-Vmware-G2H-Escape-Vulnerabilities.pdf)

[Escape from VMware Workstation by using "Hearthstone"](https://cansecwest.com/slides/2017/CSW2017_QinghaoTang_XinleiYing_vmware_escape.pdf)

[VMWare GuestRPC mechanism](http://sysprogs.com/legacy/articles/kdvmware/guestrpc.shtml)

[AngelBoy1 Presentations](https://www.slideshare.net/AngelBoy1/presentations)

[Make PE Backdooring Great Again](https://gsec.hitb.org/materials/sg2019/D2%20COMMSEC%20-%20PErfidious%20-%20Make%20PE%20Backdooring%20Great%20Again%20-%20Shreyans%20Doshi.pdf)

## 📝 Certification Preparation

[PWK/OSCP Preparation](https://github.com/rewardone/OSCPRepo)

[CTP/OSCE Course Preparation - HeapSpray + SEH + EggHunter](https://blog.pwn.al/security/ctp/osce/exploitation/2017/07/06/osce-ctp-prep-heapspreay-seh-egghunter.html)

[AWE/OSEE Preparation](https://github.com/timip/OSEE)

## 🥼 Labs/Wargames

[RET2 WarGames (Paid)](https://wargames.ret2.systems/)

[ROP Emporium](https://ropemporium.com/)

[pwnable xyz](https://pwnable.xyz/)

[pwnable kr](http://pwnable.kr/)

[pwnable tw](https://pwnable.tw/)

[0x0539](https://0x0539.net/)

[crackmes](https://crackmes.one/)

[Embedded Security CTF](https://microcorruption.com/login)

[HackSys Extreme Vulnerable Driver](https://github.com/hacksysteam/HackSysExtremeVulnerableDriver)

[Vulnserver](https://github.com/stephenbradshaw/vulnserver)

[Perfect Malware Samples](https://github.com/Perfectdotexe/Perfect-Malware-Samples)

[Damn Vulnerable Router Firmware](https://github.com/praetorian-code/DVRF)

[Exploit Exercises](https://exploit-exercises.lains.space/)

## 📰 Other

[Bit Twiddling Hacks](https://graphics.stanford.edu/~seander/bithacks.html)

[i8086 and DOS interrupts](http://www.gabrielececchetti.it/Teaching/CalcolatoriElettronici/Docs/i8086_and_DOS_interrupts.pdf)

[Getting familiar with HackSys Extreme Vulnerable Driver](https://www.youtube.com/watch?v=0wWT-YovwgM&ab_channel=hasherezade)

[Magic Number Database](https://www.magnumdb.com/)

[Online Crypto Course](https://crypto.stanford.edu/~dabo/courses/OnlineCrypto/)

[Awesome Pen Testing](https://github.com/enaqx/awesome-pentest)

[Sample Pen Test Resume](https://github.com/hmaverickadams/Sample-Pentest-Resume)

[Cheatsheet God](https://github.com/OlivierLaflamme/Cheatsheet-God)

Scuffed_Low_Level_Stash

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README