HuskyHacks

PMAT-labs

Labs for Practical Malware Analysis & Triage

SharpTokenFinder

C# implementation of TokenFinder. Steal M365 access tokens from Office Desktop apps

clarion

The clarion call tells you if someone is logging into an AitM proxy that is proxying your M365 login page

blue-jupyter

Jupyter Notebooks for the Blue Team

HuskyHacks

CVE-2021-38817-Remote-OS-Command-Injection

Remote OS Command Injection in TastyIgniter v3.0.7 Sendmail Path field

HuskyHacks.github.io

SandboxEvasion_BuildCommDCBAndTimeoutA

Sandbox evasion (probably?) via BuildCommDCBAndTimeoutA PoC

dracula-css-notion-super

The Dracula color theme for Notion/Super.so sites. I spent a while on this so I don't want to lose it.

GraphSpy

Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI

AWS-malware-lab

Creation of a laboratory for malware analysis in AWS

Certipy

Tool for Active Directory Certificate Services enumeration and abuse

cloudy-with-a-chance-of-malware

Terraform repo for "Cloudy with a Chance of Malware"

cve-2022-42889-text4shell-docker

Dockerized POC for CVE-2022-42889 Text4Shell

docker-elk

The Elastic stack (ELK) powered by Docker and Compose.

flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

hardyharHAR

impacket

Impacket is a collection of Python classes for working with network protocols.

logformatter

logformatter

OffensiveNim

My experiments in weaponizing Nim (https://nim-lang.org/)

pancakescon-2024

How to Combat Microsoft365 Account Takeovers (while you're not out Thru-Hiking the Appalachian Trail

PynAuth

VM-Packages

gitdemo2

GraphRunner

A Post-exploitation Toolset for Interacting with the Microsoft Graph API

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

merlin-agent

replit-test

SharpCollection

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

Unprotect_Submission

Repository to publish your evasion techniques and contribute to the project