clod81

block_service_workers

Extension to block Service Workers registration in Chrome (also see https://shadow-workers.github.io )

shellcode_runner_copy_in_chunk

C# loader that copies a chunk at the time of the shellcode in memory, rather that all at once

loader_process_hollow_copy_in_chunk

About C# loader that copies a chunk at the time of the shellcode in memory in a suspended process, rather that all at once

shellcode_runner_copy_encoded_decode_after

C# loader that copies an encoded shellcode in memory and decodes after the initial memory write

loader_process_hollow_decode_after_initial_write

C# loader that copies an encoded shellcode in memory in a suspended process and decodes it byte by byte afterwards

jemquarie

Jemquarie provides an easy way to interact with Macquarie ESI api. For Ruby and Ruby on Rails.

orpheus

Bypassing Kerberoast Detections with Modified KDC Options and Encryption Types

aad-sso-enum-brute-spray

POC of SecureWorks' recent Azure Active Directory password brute-forcing vuln

beef

The Browser Exploitation Framework Project

brown-bags

ChromeHttpRequestBlocker

Chrome extension that allows blocking HTTP request based on URL pattern definitions.

Creds

Some usefull Scripts and Executables for Pentest & Forensics

D-Pwn

D/Invoke standalone shellcode runners

DInvoke

Dynamically invoke arbitrary unmanaged code from managed code without P/Invoke.

eaphammer

Targeted evil twin attacks against WPA2-Enterprise networks. Indirect wireless pivots using hostile portal attacks.

EDRSandblast-GodFault

EDRSandblast-GodFault

ess

Shopify's Enterprise Script Service

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

gmapsapiscanner

iBoot

metasploit-framework

Metasploit Framework

Neo-reGeorg

Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

oauth2

A Ruby wrapper for the OAuth 2.0 protocol.

OSEP-Code-Snippets

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.

SharpDPAPI

SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.

Shhhloader

SysWhispers Shellcode Loader (Work in Progress)

STFUEDR

Silence EDRs by removing kernel callbacks

token-incrementor

Burp extension to increment a parameter in each active scan request

Walrus

An Android app that lets you use your access control card cloning devices in the field.