磨损_低_等级_藏宝 - 用于二进制开发和反向工程的Stash

项目说明

🔺 Scuffed Low Le 🔺

Follow me: Twitter - @0xRoman1

*Scuffed Stash for e Binary Exploitation and Reverse Engineering related*

!pepe hax

📢 Introductory Information

Here are some recommended recourses to browse through if you are just starting off.

What is x86-64

What is the x64 Architecture

Assembly Language Book

AT&T Syntax Intel Syntax

X86 Assembly/GAS Syntax

x86 and amd64 instruction reference

Understanding the differences between 8bit, 16bit, 32bit, and 64bit

LordNoteworthy CPU Internals

FLAGS register

Stack Frames and how they work

Anatomy of a Program in Memory

What is NX?

What is DEP?

What are Stack Canaries?

What does PIE Mean?

What is ASLR?

Memory and Address Translation

PC Assembly Language

Studio Code Assembly

Exploit a basic buffer o

Risc-

💡 Tutorials/Courses

Here are some great free courses and tutorials. The first 5 links contain some great information.

Nightmare

Nightmare Book

BinExp Course

Offensi Exploitation (OSE) Course

Modern Binary Exploitation - CSCI 4968

PWN College

Exploit Education

OpenSecurityTraining

Let's Learn x86-64 Assembly!

x86 Assembly Crash Course

A Crash Course in x86 Assembly for Reverse Engineers

x86-64 Assembly Language Programming with Ubuntu

TryHackMe x86-64 Assembly Documentation

Quick Guide to Assembly in 161

Z0F-Course on Reverse Engineering

Fuzzy Security

Exploit De Community Course

NASM Tutorial

Introduction to Computer Organization: ARM Assembly Language Using the Raspberry Pi

A gentle introduction to multithreading

Abatchy's Blog

Connor Mcgarr's Blog

SEH Based Exploits

COM Hijacking for Lateral Mo

Exploit Mitigation Techniques - Stack Canaries

0ctf babystack with return-to dl-resolve

Format String Exploitation-Tutorial

ARM64 Re and Exploitation

🐧 Linux Exploitation

Linux System Call Table 32 Bit

Linux System Call Table 64 Bit

A gentle introduction to Linux Kernel fuzzing

The ne problems of local ASLR holes in Linux

Unleashing Use-After-Free in Linux Kernel

Exploiting A Use-After-Free With radare2 - CTF Challenge

🌆 Windows Exploitation

Windows Exploitation Resources

Buffer o Windows exploit de practice - 50 proof of concepts

An In-Depth Look into the Win32 Portable Executable File Format

Basics of Windows shellcode writing

Understanding Windows Shellcode

Bypassing Windows Hardware-enforced Data Execution Pre

A Beginner’s Guide to Windows Shellcode Execution Techniques

Windows 10 Mitigation Impro

Mitigating arbitrary native code execution in Microsoft Edge

Bypassing Control Flow Guard in Windows 10

Bypassing Mitigations by Attacking JIT Server in Microsoft Edge

Understanding type confusion

Kernel-mode Payloads on Windows

Windows SMEP bypass

Kernel Hacking With HEVD

DLL Injection Using LoadLibrary in C

Use After Free

🤖 Return Oriented Programming

Return Oriented Programming Techniques

Deep Dive into ROP Payload Analysis

Return Oriented Programming Tetzank Guide

Return-into-libc without Function Calls

Chaining DEP with ROP

return-to-csu: A New Method to Bypass 64-bit Linux ASLR

ROP Emporium - ret2csu

Framing Signals—A Return to Portable Shellcode

Slides for Framing Signals—A Return to Portable Shellcode

SROP Exploitation with radare2

Sigreturn-Oriented Programming

ret2dlresolve

Jump-Oriented Programming

Utilizing Code Reuse/ROP in PHP Application Exploits

🤸 Heap Exploitation

Heap Exploitation Book

Understanding the Low Fragmentation Heap

Heap O for Humans

how2heap

Linux Heap TCache Poisoning

Remote Code Execution Poisoning

Applying Return Oriented and Jump Oriented Programming Exploitation Techniques with Heap Spraying

💻 Programming

Assembly’s Perspective of C

Creating a Rootkit to Learn C

The 5-Minute Guide to C Pointers

🔄 Reverse Engineering

RE Reading List

IDAPython

IDAPython Book

A journey into Radare 2

Introduction To Reverse Engineering With Radare2

Cutter RE Platform Powered by Radare2

Reverse Engineering Resources

Getting Started with Reverse Engineering

Reverse Engineering for Beginners

Malware Unicorn Reverse Engineering 101

Applied Reverse Engineering Series

Reverse Engineering

Malware Analysis For Hedgehogs

Python for Reverse Engineering

Knockin’ on Heaven’s Gate – Dynamic Processor Mode Switching

🛎️ Useful Slides

The info leak era on software exploitation

Case Study of Guest-To-Host escape

Escape from Workstation by using "Hearthstone"

GuestRPC mechanism

AngelBoy1 Presentations

Make PE Backdooring Great Again

📝 Certification Preparation

PWK/OSCP Preparation

CTP/OSCE Course Preparation - HeapSpray + SEH + EggHunter

AWE/OSEE Preparation

🥼 Labs/Wargames

RET2 WarGames (Paid)

ROP Emporium

pwnable xyz

pwnable kr

pwnable tw

0x0539

crackmes

Embedded Security CTF

HackSys Extreme Driver

Perfect Malware Samples

Damn Router Firmware

Exploit Exercises

📰 Other

Bit Twiddling Hacks

i8086 and DOS interrupts

Getting familiar with HackSys Extreme Driver

Magic Number Database

Online Crypto Course

Awesome Pen Testing

Sample Pen Test Resume

Cheatsheet God

项目信息

开发语言：未知

Star 数：108

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Stash for Binary Exploitation and Reverse Engineering Resources展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。