ASkyeye

followers

following

stars

Github

Las Vegas, USA

kevin worst's starred repositories

haproxy

HAProxy Load Balancer's development branch (mirror of git.haproxy.org)

Language:CNOASSERTION4724 120 2581

unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

Language:PythonNOASSERTION3695 232 143

WinPwn

Automation for internal Windows Penetrationtest / AD-Security

Language:PowerShellBSD-3-Clause3266 81 44

pypykatz

Mimikatz implementation in pure Python

Language:PythonMIT2779 74 98

WinPwnage

UAC bypass, Elevate, Persistence methods

Language:Python2576 108 44

UltimateAppLockerByPassList

The goal of this repository is to document the most common techniques to bypass AppLocker.

Language:PowerShell1872 117 8

Nidhogg

Nidhogg is an all-in-one simple to use rootkit.

Language:C++GPL-3.01691 32 15

awesome-linux-rootkits

awesome-linux-rootkits

CC0-1.01650 58 3

LOLBAS

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

Language:XSLT1582 143 2

poc

Proof of Concepts

Language:PythonBSD-3-Clause1201 1140

security

Some of my security stuff and vulnerabilities. Nothing advanced. More to come.

Robber

Robber is open source tool for finding executables prone to DLL hijacking

Language:PascalGPL-3.0757 37 6

TikiTorch

Process Injection

Language:C#GPL-3.0752 300

Windows10-CustomKernelSigners

Load self-signed drivers without TestSigning or disable DSE. Transferred from https://github.com/DoubleLabyrinth/Windows10-CustomKernelSigners

Language:C++627 20 7

Intensio-Obfuscator

Obfuscate a python code 2.x and 3.x

Language:PythonMIT625 18 70

EmbedInHTML

Embed and hide any file in an HTML file

Language:HTMLGPL-3.0473 25 4

VulnCases

Vulnerability examples.

Language:C++BSD-3-Clause400 200

DllToShellCode

Fast Conversion Windows Dynamic Link Library To ShellCode

Language:C369 13 4

InvisiblePersistence

Persisting in the Windows registry "invisibly"

Language:C++337 14 2

RedditC2

Abusing Reddit API to host the C2 traffic, since most of the blue-team members use Reddit, it might be a great way to make the traffic look legit.

Language:PythonGPL-3.0249 7 3

UacBypass

A demo to bypass windows 10 default UAC configuration using IFileOperation and dll hijacking

Language:C++GPL-2.0191 19 1

AggressorAssessor

Aggressor scripts for phases of a pen test or red team assessment

Language:PythonGPL-3.0169 130

0pack

A novel technique to hide code from debuggers & disassemblers

Language:C++GPL-3.0152 10 3

CVE-2019-0859-1day-Exploit

CVE-2019-0859 1day Exploit

Language:C++120 5 2

Sigma-Hunting-App

A Splunk App containing Sigma detection rules, which can be updated from a Git repository.

Language:PythonMIT106 6 1

Homework-of-Powershell

powershell codes of my blog.

Language:PowerShell99 6 1

malware_decoders

Static based decoders for malware samples

Language:PythonMIT93 11 1

CVE-2023-38646

Automatic Tools For Metabase Exploit Known As CVE-2023-38646

Language:Python27 1 1

code-injection

A collection of methods of Code Injection on Windows

Language:C++10 30

texthex

Read text section bytes and format it for shellcode (64bit ELF only)

Language:Rust2 10