From newest to oldest: /w00depends w00w00 improved version of depends.exe to find all executables importing a certain function from a DLL (e.g., find what programs are using a vulnerable function). Can also find what DLL exports a certain function. Supports searching by ordinals. /w00gaim = gaim with encryption (by Dug Song) This is a w00w00 improved version of gaim (http://gaim.sourceforge.net), an open source instant messenger, to add encryption support. By Dug Song. /LibExploit (by Conde Va) An exploit library by Conde Va. Includes documentation and the shellcode for many platforms. /w00dexor.c A simple XOR decryptor useful in dumping out XOR'd shellcode to see what it's doing. Compile the output and then look at it with gdb (using the "x/i" instruction) or IDA /dumptoken Dumps out a process token on Windows /iisoop An exploit for the IIS out-of-process CoImpersonateClient problem /dotNETHookLibrary Injects arbirary MSIL bytecode into .NET functions /shellcode/windows/bindshell.cpp C version of a bindshell that could be converted to assembly /exploits/w00aimexp Exploit for w00w00 AIM vulnerability See files/advisories/aim*.txt /trojans/w00lien (by Conde Va) An anti-debugging trojan that will read a parasite from its memory and execute it I'll put a shellcode version of bindshell.cpp sometime Some good stuff coming up in the next few months... Sorry to be so slow, time constraints suck.