Xavier D. Johnson's repositories
esp8266_honeypot
THE ESP8266 HONEYPOT: A PROJECT TO TRAP SCRIPT KIDDIES EVERYWHRE!!
Application-and-Image-Security-Scans-in-CI-CD
Application and Image Security Scans in CI/CD
atomic-red-team
Small and highly portable detection tests based on MITRE's ATT&CK.
aws-serverless-auth-reference-app
Serverless reference app and backend API, showcasing authentication and authorization patterns using Amazon Cognito, Amazon API Gateway, AWS Lambda, and AWS IAM.
commando-vm
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@fireeye.com
Cronos
PoC for a new sleep obfuscation technique leveraging waitable timers to evade memory scanners.
DumpThatLSASS
Dumping LSASS by Unhooking MiniDumpWriteDump by getting a fresh DbgHelp.dll copy from the disk , plus functions and strings obfuscation , it contains Anti-sandbox , if you run it under unperformant Virtual Machine you need to uncomment the code related to it and recompile.
exploitdb-bin-sploits
Exploit Database binary exploits located in the /sploits directory
FilelessRemotePE
Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique
Fuzzing101
An step by step fuzzing tutorial. A GitHub Security Lab initiative
gcredstash
gcredstash manages credentials using AWS Key Management Service (KMS) and DynamoDB.
hello-auth-grpc
two grpc microservices with mutual TLS and token authentication in Go
IntruderPayloads
A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.
osmedeus-base
Build your own reconnaissance system with Osmedeus Next Generation
privacy.sexy
Open-source tool to enforce privacy & security best-practices on Windows, because privacy is sexy 🍑🍆
RedTeam-Tactics-and-Techniques
Red Teaming Tactics and Techniques
snap_wtf_macos
WTF Snapshot fuzzing of macOS targets
tsunami-security-scanner
Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.