osed

A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.

Offensive Security OSCP+, OSEP, OSWP, OSWA, OSWE, OSED, OSMR, OSEE, OSDA, OSIR, OSTH Exam and Lab Reporting / Note-Taking Tool

bespoke tooling for offensive security's Windows Usermode Exploit Dev course (OSED)

Plan your InfoSec certification journey with this community-driven project, developed by Dragkob and his R&D team.

Some notes + exercises that I've done during my study for the Offensive Security Exploit Developer.

QuoteDB - A Vulnerable TCP Server to practice Win32 exploitation

A tool for developing bad character-free shellcode to bypass DEP with WriteProcessMemory (32-bit only)

Signatus - A Vulnerable TCP server to practice Win32 exploitation

Tooling for the OffSec Experienced Pentester (OSEP) and OffSec Exploit Developer (OSED) course

A collection of Windows x32 exploits created while preparing for the OSED certification exam

Exploits written while preparing for the OSED exam

GenZ Shellcode Generator to execute commands with winExec API

narly.js - print binary protections with Windbg JS (/SafeSEH, /GS, ASLR, etc.)

Advanced ROP Gadget Filtering & Chain Solver

IDC plugins to support OSED exam preparation, some of the scripts are simplified port of devttyS0 IDAPython plugins

Notes taken from the official Offensive Security Exploit Development course videos and pdf

Scripts developed for OSED exam preparation

Pykd script to perform simple code tracing and so inspecting control flow executed (CFE).

Organizes rp++ output to make finding good gadgets faster

A handy WinDBG script for finding PPR instructions