Andy's repositories
WindowsHardeningScript
Some settings stolen from multiple scripts @ZephrFish
AutoHoneyPoC
AutoPoC Generator HoneyPoC
CVE-2023-20198-Checker
CVE-2023-20198 & 0Day Implant Scanner
DynamicMSBuilder
A Dynamic MSBuild task to help with minor obfuscation of C# Binaries to evade static signatures on each compilation
ChunkyIngress
Solving problems I didn't think I'd have on a saturday with clipboard copy pasta limits with powershell
ADFSDump-PS
PowerShell Implementation of ADFSDump to assist with GoldenSAML
CVE-2023-34362
CVE-2023-34362: MOVEit Transfer Unauthenticated RCE
SandboxSpy
Code for profiling sandboxes - Initially an idea to profile sandboxes, the code is written to take enviromental variables and send them back in a Base32 string over HTTP to an endpoint.
HelloJackHunter
Research into WinSxS binaries and finding hijackable paths
NotProxyShellScanner
Python implementation for NotProxyShell aka CVE-2022-40140 & CVE-2022-41082
WebSocketsAreFun
FAFO with WebSockets
zephrfish.github.io
zsec backup blog
CVE-2024-3400-Canary
Have we not learnt from HoneyPoC?
OffensiveCpp
This repo contains C/C++ snippets that can be handy in specific offensive scenarios.
allthewayback
Search the Wayback Machine for specific historical files which may contain sensitive data.
assetnote-exploits
Repository to store exploits created by Assetnotes Security Research team - some forked and modified for easier scanning
C-from-Scratch
A roadmap to learn C from Scratch
DLL-Exports-Reverse-Proxy-Gen
A simple python tool to generate a a header file of correctly formatted DLL export function forwards for all functions exported by the target DLL.
GOAD
game of active directory but on Windows
IconJector
Unorthodox and stealthy way to inject a DLL into the explorer using icons
Spartacus
Spartacus DLL/COM Hijacking Toolkit