chadduffey

OSED-Notes

Some notes + exercises that I've done during my study for the Offensive Security Exploit Developer.

MS-DOS

The original sources of MS-DOS 1.25, 2.0, and 4.0 for reference purposes

ADACLScanner

Repo for ADACLScan.ps1 - Your number one script for ACL's in Active Directory

InternalAllTheThings

Active Directory and Internal Pentest Cheatsheets

awesome-cloud-security

A curated list of awesome cloud security blogs, podcasts, standards, projects, and examples.

Browser-password-stealer

This python program gets all the saved passwords, credit cards and bookmarks from chromium based browsers supports chromium 80 and above!

Pentest-Everything

A collection of CTF write-ups, pentesting topics, guides and notes. Notes compiled from multiple sources and my own lab research. Topics also support OSCP, Active Directory, CRTE, eJPT and eCPPT.

ActiveDirectoryDomainServices

Active Directory Domain Services (ADDS)

4688-sysmon

activedirectory-lab

Terraform config to spin up a domain controller and some member servers in azure

Whisker

Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account.

ConPtyShell

ConPtyShell - Fully Interactive Reverse Shell for Windows

follina.py

POC to replicate the full 'Follina' Office RCE vulnerability for testing purposes

Galaxy-Bugbounty-Checklist

Tips and Tutorials for Bug Bounty and also Penetration Tests.

for-linux

Docker Engine for Linux

osint_stuff_tool_collection

A collection of several hundred online tools for OSINT

theZoo

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

PMAT-labs

Labs for Practical Malware Analysis & Triage

spoofcheck

Spoofcheck

Azure_Workshop

osed-scripts

bespoke tooling for offensive security's Windows Usermode Exploit Dev course (OSED)

OSED

Containing my notes, practice binaries + solutions, blog posts, etc. for the Offensive Security Exploit Developer (OSED/EXP-301)

security-bulletins

Vulnerability and security bulletins related to Palantir software products.

windows_hardening

HardeningKitty and Windows Hardening Settings

x64dbg

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

TortugaToolKit

Collection of some of my own tools with other great open source tools out there packaged into a powershell module

overflow_with_joy

buffer overflow exploits for simple c programs (64 bit)

badchars

Bad char generator to instruct encoders such as shikata-ga-nai to transform those to other chars.

cve

Gather and update all available and newest CVEs with their PoC.

ms-identity-python-webapp

A Python web application calling Microsoft graph that is secured using the Microsoft identity platform