Global

DirtyFrag is a hardened fork of diabl0w/DFRoot. It exploits CVE-2026-43284 (DirtyFrag), a kernel page cache write primitive, to load a kernel module without an unlocked bootloader and without a custom kernel.

> Featured: REA — Agent-oriented reverse-engineering tools, from application behavior to native binaries. By the creators of awesome-reverse-engineering.

The software is provided as-is, without warranty. You assume the risks of using it, including system instability, data loss, and account bans. The maintainers accept no liability for resulting damage.

Rows explicitly marked Shizuku required run through a shell UserService. Start Shizuku with ADB and tap the status card to grant access; all other rows use the app's normal execution path.

) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.

app in Applications ➔ click Open ➔ click Open. > - Method 2 (Terminal): >

This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more.

claude-red is a curated library of offensive security skills designed for the Claude skills system. md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.

WebKit exploits are usually loaded by pointing your PS5's DNS at some server hosted by someone on the internet. That means you're putting your trust in whoever runs that server — and if it goes down, changes, or disappears, your setup breaks.

"Another AI hacker? Let us guess — it runs nmap and writes a report."

0) — built to > run on any agent harness, not just Claude Code. This fork's focus: > harness portability, sandboxed (containerized) exploit validation, > and measured-impact PoCs. See > Why the changes · > What this fork changes · > The numbers.

List of awesome reverse engineering resources

Note: Peer Pressure does not support dashlaunch or dashlaunch plugins, for more information on why this is see Homebrew Comptability.

Jailed iOS app that can install IPAs permanently with arbitary entitlements and root helpers because it trolls Apple

Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds.

Atmosphère is a work-in-progress customized firmware for the Nintendo Switch.

1) provided by LocalDevVPN. File operations are handled by AirliftFFI, a Rust library that interfaces with the AirTraffic service.

⚠ This tool is created solely for educational or bug bounty purpose only. Unauthorized use outside of controlled environments is strictly prohibited.

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

CAUTION] USE AT YOUR OWN RISK. BE EXTREMELY CAREFUL. This suite is > designed to generate and execute autonomously generated code that may be > unstable or perform unexpected actions.

> Apple Wallet Card Skinner & Lockscreen Passcode Themer for iOS 18+ (No Jailbreak Required) > Native Windows client written in Rust. Powered by the airlift AirTraffic sync exploit.

Let's make it the biggest resource repository for our community.

Pwntools is a CTF framework and exploit development library. Written in Python, it is designed for rapid prototyping and development, and intended to make exploit writing as simple as possible.

Poke the DRAM controller and an address can be made to land wherever you want in memory. skitter-creek-bath-salts modifies the bottom layers of the memory hierarchy to rewire the physical DRAM address translations.

Uncensored AI models or those fine-tuned for cybersecurity tasks.

WARNING] > DISCLAIMER & RESPONSIBLE RESEARCH DECLARATION > All prompts, system instructions, and PoC payloads archived herein are compiled strictly for academic research, red-teaming verification, and defensive AI alignment.

The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team exercises.

Needless to say, most websites suffer from various types of bugs which may eventually lead to vulnerabilities. Why would this happen so often? There can be many factors involved including misconfiguration, shortage of engineers' security skills, etc.

Dirty Frag is a case that extends the bug class to which Dirty Pipe and Copy Fail belong.

-5-BugBounty — “Let me reset your password and login into your account “-How I was able to Compromise any User Account via Reset Password Functionality: