aslr

KASLD derandomizes the Linux kernel's virtual and physical memory layout from a local process, using whatever its vantage — privilege, configuration, and confinement — allows.

Multi-arch docker image with ffmpeg/ffprobe binaries built as hardened static PIE binaries with no external dependencies

Exploit Development - Weaponized Exploit and Proof of Concepts (PoC)

Some notes + exercises that I've done during my study for the Offensive Security Exploit Developer.

Moved: https://codeberg.org/koutheir/binary-security-check

Red-team tool to hook libc read syscall with a buffer overflow vulnerability.

Finding and classifying ROP gadgets from rp++ output file with some regex and a CLI. Built during an OffSec journey, primarily for the EXP-301 and EXP-401 courses.

The project collects the gadgets and records the time to obtain gadgets from a process by utilizing an attack technique called Just-In-Time Return-Oriented Programming (JIT-ROP). We utilize the JIT-ROP technique to evaluate different fine-grained address space layout randomization (ASLR) schemes and measure the upper bound of effective re-random…

File Capability Extractor

ASLR Disabler (x86 / x64) - Little utility for disabling the ASLR on PE files

Dynamic loading with privilege separation

Run program without ASLR (supports Linux and macOS)

Check various security hardening features on ELF, PE and Mach-O binaries

libc_database python wrapper for exploit automation

Repo code for the related post on SecSI Blog: https://secsi.io/blog/blueborne-kill-chain-on-dockerized-android

collection of articles of random topics for private research purposes

LD_PRELOADed library to randomize malloc and friends.

Shell script to launch a Bash instance, from which all child processes will have ASLR disabled

My assignments on GDB and Computer Architecture; Buffer Overflow; Stack Overflow and ROP gadgets; ASLR; Heap Overflow; Type Confusion; Injection Attack; Fuzzing.

ROF - Raw Overflow Forge 🔥 An all-in-one ROP exploitation engine that automates binary analysis, gadget extraction, and payload generation. Perfect for CTF challenges, security research, and learning return-oriented programming techniques.