Chad Duffey's starred repositories
OSED-Notes
Some notes + exercises that I've done during my study for the Offensive Security Exploit Developer.
ADACLScanner
Repo for ADACLScan.ps1 - Your number one script for ACL's in Active Directory
InternalAllTheThings
Active Directory and Internal Pentest Cheatsheets
awesome-cloud-security
A curated list of awesome cloud security blogs, podcasts, standards, projects, and examples.
Browser-password-stealer
This python program gets all the saved passwords, credit cards and bookmarks from chromium based browsers supports chromium 80 and above!
Pentest-Everything
A collection of CTF write-ups, pentesting topics, guides and notes. Notes compiled from multiple sources and my own lab research. Topics also support OSCP, Active Directory, CRTE, eJPT and eCPPT.
ActiveDirectoryDomainServices
Active Directory Domain Services (ADDS)
activedirectory-lab
Terraform config to spin up a domain controller and some member servers in azure
ConPtyShell
ConPtyShell - Fully Interactive Reverse Shell for Windows
follina.py
POC to replicate the full 'Follina' Office RCE vulnerability for testing purposes
Galaxy-Bugbounty-Checklist
Tips and Tutorials for Bug Bounty and also Penetration Tests.
osint_stuff_tool_collection
A collection of several hundred online tools for OSINT
spoofcheck
Spoofcheck
osed-scripts
bespoke tooling for offensive security's Windows Usermode Exploit Dev course (OSED)
security-bulletins
Vulnerability and security bulletins related to Palantir software products.
windows_hardening
HardeningKitty and Windows Hardening Settings
TortugaToolKit
Collection of some of my own tools with other great open source tools out there packaged into a powershell module
overflow_with_joy
buffer overflow exploits for simple c programs (64 bit)
ms-identity-python-webapp
A Python web application calling Microsoft graph that is secured using the Microsoft identity platform