Exploit Development and Reverse Engineering with GDB & LLDB Made Easy - pwndbg/pwndbg
hugsy/gef
GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux
GitHub - longld/peda: PEDA - Python Exploit Development Assistance for GDB
PEDA - Python Exploit Development Assistance for GDB - longld/peda
sourcehut - the hacker's forge
sourcehut is a network of useful open source tools for software project maintainers and collaborators, including git repos, bug tracking, continuous integration, and mailing lists.
bradleyjkemp/grpc-tools
A suite of gRPC debugging tools. Like Fiddler/Charles but for gRPC.
Using Claude to reduce the attack surface of code
Automated attack surface analysis and reduction can meaningfully improve the security of deployed software in the near term. In this post, we preview data we’ve collected from applying attack surface reduction techniques to large open-source codebases using Claude.
Relyze - Interactive x86, x64, ARM32 and ARM64 software reverse engineering
Relyze lets you disassemble, decompile and binary diff native code software.
Atuin - Shell History & Executable Runbooks
We started with an open-source CLI that developers actually wanted to use. Now we're exploring what happens when that same philosophy meets team workflows.
GitHub - Nukesor/pueue: :stars: Manage your shell commands.
:stars: Manage your shell commands. Contribute to Nukesor/pueue development by creating an account on GitHub.
dsasmblr/game-hacking
Tutorials, tools, and more as related to reverse engineering video games.
git-pkgs/forge
Go library and CLI for working with git forges. Supports GitHub, GitLab, Gitea/Forgejo, and Bitbucket Cloud through a single interface.
GitHub MCP Exploited: Accessing private repositories via MCP
We showcase a critical vulnerability with the official GitHub MCP server, allowing attackers to access private repository data. The vulnerability is among the first discovered by Invariant's security analyzer for detecting toxic agent flows.
oss-security - Dirty Frag: Universal Linux LPE
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Build, debug & deploy with AI
Query and edit large codebases, generate apps from images or PDFs, and automate complex workflows—all from your terminal with Gemini 3.
