A WIP cheat sheet for various linux kernel heap exploitation techniques (and privilige escalations).
☆106Jan 13, 2026Updated last month
Alternatives and similar repositories for how2keap
Users that are interested in how2keap are comparing it to the libraries listed below
Sorting:
- My browser pwn collections. Mainly JavaScript engine stuff.☆33Jan 27, 2025Updated last year
- GEF - GDB Enhanced Features - bata24's fork☆623Feb 27, 2026Updated last week
- A Linux Kernel Exploitation C Library☆19Oct 29, 2025Updated 4 months ago
- Linux kernel privilege escalation techniques☆152Aug 9, 2024Updated last year
- Binary Exploitation Skill. Gain RCE from arbitrary write.☆244Dec 23, 2024Updated last year
- kernel-pwn and writeup collection☆700Oct 2, 2023Updated 2 years ago
- ☆189Feb 8, 2025Updated last year
- ☆272Aug 2, 2025Updated 7 months ago
- SCTF 2023 kernel pwn && CVE-2023-3640☆29Jul 17, 2023Updated 2 years ago
- A linux exploitation skill facilitates heap address leaking or performs overflow from BSS to heap☆20May 3, 2024Updated last year
- Kernel Read Write Execute☆46Jan 13, 2025Updated last year
- ☆40Feb 3, 2026Updated last month
- ☆12Aug 22, 2022Updated 3 years ago
- a new class of file structure attacks☆59Nov 19, 2022Updated 3 years ago
- A tool combining DWARF info and source to search for kernel heap objects☆24Dec 23, 2025Updated 2 months ago
- A gdb plugin for linux kernel.☆28Jul 14, 2023Updated 2 years ago
- ☆34Jun 11, 2024Updated last year
- ☆21Apr 6, 2025Updated 11 months ago
- ☆103Dec 17, 2025Updated 2 months ago
- VirtuAlization GDb integrations in pwntools☆38Jan 6, 2026Updated 2 months ago
- study https://github.com/n132/Libc-GOT-Hijacking☆15Dec 7, 2023Updated 2 years ago
- a simple method to get v8 source code with github action☆77Sep 7, 2023Updated 2 years ago
- attachments and (some) writeups/source code for RWCTF 6th☆125Feb 2, 2024Updated 2 years ago
- A bunch of V8 resources (with a security focus)☆97Feb 27, 2026Updated last week
- Overview of Microsoft Patch Tuesday☆14Sep 13, 2024Updated last year
- public archive for corCTF 2023☆18Aug 6, 2023Updated 2 years ago
- ☆219Aug 27, 2025Updated 6 months ago
- ☆228Dec 9, 2020Updated 5 years ago
- attachment and write up for D^3CTF 2023's pwn challenge - d3kcache☆41Jun 28, 2024Updated last year
- An IDA Pro plugin that display cross-references to functions or variables across the entire binary in Hex-Rays pseudocode☆126Jan 31, 2026Updated last month
- AngrPT recover the Windows Driver's DeviceIoControl Interface and Dependencies for getting higher coverage in Fuzzing Process.☆19Jan 20, 2026Updated last month
- Collection of browser challenges☆140May 3, 2021Updated 4 years ago
- Write-ups for various CTF☆218Sep 2, 2025Updated 6 months ago
- Linux kernel module implementation & exploitation (pwn) labs.☆211Jan 26, 2022Updated 4 years ago
- ☆392Oct 2, 2022Updated 3 years ago
- Include CVE vulnerability analyze， ctf pwn and documents for Browser-pwn☆189Dec 25, 2020Updated 5 years ago
- Windows KASLR bypass using prefetch side-channel☆178Apr 26, 2024Updated last year
- Easily debug processes running in docker containers☆29Jun 22, 2024Updated last year
- PoC of fuzzing closed-source userspace binaries with KVM☆167May 4, 2024Updated last year