Mayfly277

mayfly277.github.io

blog

phpggc_tester

quick payload testing on phpggc

docker_log4shell

Playin with docker and log4shell vuln

ctftime_events_info

simple script to call ctf time api and show basic Events information (past and upcoming)

docker_log4shell_java11

impacket

Impacket is a collection of Python classes for working with network protocols.

mycheatsheet

PwnKit

Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation

RTO_Aggressor_Script

Cobalt Strike Aggressor script create for RTO

ansible-role-win_laps

Ansible Role to install LAPS on Windows - https://technet.microsoft.com/en-us/mt227395.aspx

arsenal

Arsenal is just a quick inventory and launcher for hacking programs

cacti

Cacti ™

CS-Situational-Awareness-BOF

Situational Awareness commands implemented using Beacon Object Files

dploot

DPAPI looting remotely in Python

evil-pod

kubernetes evil pod and rbac test

Exegol

Exegol is a kali light base with a few useful additional tools and some basic configuration

exfil

JNDI-Exploit-Kit

JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP Server, RMI Server and LDAP Server to exploit java web apps vulnerable to JNDI Injection）

krbrelayx

Kerberos unconstrained delegation abuse toolkit

OSEP-Code-Snippets

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

pi-pwnbox-rogueap

Homemade Pwnbox :rocket: / Rogue AP :satellite: based on Raspberry Pi — WiFi Hacking Cheatsheets + MindMap :bulb:

proxmox-api-go

Consume the proxmox API in golang

rec

record audit session using asciinema

rogue-jndi

A malicious LDAP server for JNDI injection attacks

root-me_badge

root-me_vm_template

vagrant/ansible template for root-me

shellcode

Various shell code I have written

Shellcode-Injection-Techniques

A collection of C# shellcode injection techniques. All techniques use an AES encrypted meterpreter payload. I will be building this project up as I learn, discover or develop more techniques. Some techniques are better than others at bypassing AV.

terraform-provider-proxmox

Terraform provider plugin for proxmox