deltaclock

zx

A tool for writing better scripts

loki

Like Prometheus, but for logs.

owncast

Take control over your live stream video by running it yourself. Streaming + chat out of the box.

htmlq

Like jq, but for HTML.

Recaf

The modern Java bytecode editor

tamperchrome

Tamper Dev is an extension that allows you to intercept and edit HTTP/HTTPS requests and responses as they happen without the need of a proxy. Works across all operating systems (including Chrome OS).

ScyllaHide

Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide

HyperDbg

State-of-the-art native debugging tools

fwupd

A system daemon to allow session software to update firmware

AttackSurfaceAnalyzer

Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation.

CVE-2021-1675

C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527

binexport

Export disassemblies into Protocol Buffers

CVE-2021-31166

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.

can-i-take-over-dns

"Can I take over DNS?" — a list of DNS providers and how to claim (sub)domains via missing hosted zones

process_ghosting

Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted file

RCE-0-day-for-GhostScript-9.50

RCE 0-day for GhostScript 9.50 - Payload generator

gcp-dhcp-takeover-code-exec

Google Compute Engine (GCE) VM takeover via DHCP flood - gain root access by getting SSH keys added by google_guest_agent

mobile-nuclei-templates

awesome-java-security

Awesome Java Security Resources 🕶☕🔐

FalconEye

HTTPHeadModifer

一款快速修改HTTP数据包头的Burp Suite插件

dotnet-wtrace

A command-line tool for live tracing .NET applications, based on EventPipes.

ghostinthepdf

RestrictedKernelLeaks

rogue-jndi

A malicious LDAP server for JNDI injection attacks

CVE-2021-34730

Cisco RV110w UPnP stack overflow

wsshuttle

A tool to tunnel TCP traffic over WinRM

Sanity

ctf-challenges

Fun CTF (capture the flag) security challenges that I've created

phpggc_tester

quick payload testing on phpggc