JohnHammond

ctf-katana

This repository aims to hold suggestions (and hopefully/eventually code) for CTF challenges. The "project" is nicknamed Katana.

msdt-follina

Codebase to generate an msdt-follina payload

katana

Katana - Automatic CTF Challenge Solver in Python3

vbe-decoder

A Python3 script to decode an encoded VBScript file, often seen with a .vbe file extension

ignition_key

This is a small BASH script to quickly setup all the tools I would want and need on a new machine.

labs

Free and publicly available training labs and exercises, for quick copy-and-paste demonstrations, learning and education.

active_directory

Notes and resources for the Active Directory YouTube series on https://youtube.com/JohnHammond010

pyminify

Compress a Python script to a command-line one-liner

binnim

Shitty Nim code that reads in a file and converts it into \x hex representation, for the use of shellcode binaries.

c2c2

My new C2 framework

CVE-2012-2982

A Python replicated exploit for Webmin 1.580 /file/show.cgi Remote Code Execution

notes

An Obsidian vault to Github Pages workflow to hopefully make me take notes

GTFOBins.github.io

Curated list of Unix binaries that can be exploited to bypass system security restrictions

qr2unicode

Crappy Python code to render a QR code as "plaintext" with Unicode

wfi

Windows File Integrity -- an archive of information on installed Windows binaries.

misfortune-ctf-challenge

A small binary exploitation challenge to demonstrate a typical return2libc attack

netstatgo

Crappy Golang code to list local listening ports and their associated processes.

CTFd

CTFs as you need them

overthewire_natas_solutions

As requested on YouTube, this is an archive of my Python scripts and code that I've used to solve the Natas challenges from OverTheWire.

hackersyntax

training_wheels-public

The teaching vessel and "interactive textbook" that I am building for the Intro to Linux class at the USCGA.

ctfcli

ctfcli is a tool to manage Capture The Flag events and challenges

CVE-2021-4034

Bash implementation of CVE-2021-4034

base64io-python

A stream implementation for Python that provides transparent base64 encoding and decoding of an underlying stream.

drupalgeddon2

lorddemon/drupalgeddon2 just working with Python3

docker-php

Dockerfiles for php with a few extensions already loaded

stix-attack-flow

Crappy code to work with MITRE Attack Flows with the stix2 Python library

buildkit

concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit

ColdCore

A CTF platform used in IceCTF 2016

CVE-2022-41082-RCE

This is a scam repository.