lgromanowski

acme-plugin

:lock_with_ink_pen: ACME protocol plugin for Ruby on Rails applications

awesome-kubernetes-security

A curated list of awesome Kubernetes security resources

awesome-oneliner-bugbounty

A collection of awesome one-liner scripts especially for bug bounty tips.

binlex

A Binary Genetic Traits Lexer

Bug-Bounty-Methodology

My methodology for approaching a web application for bug bounty.

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

colabcat

:smiley_cat: Running Hashcat on Google Colab with session backup and restore.

ctf-archives

CTF Archives: Collection of CTF Challenges.

cve

Gather and update all available and newest CVEs with their PoC.

EXOCET-AV-Evasion

EXOCET - AV-evading, undetectable, payload delivery tool

Exploits

self-written exploits for all Nday vulnerabilities

ghidra-dark

Dark theme installer for Ghidra

handbook

A living document for penetration testing and offensive security.

how-to-bypass-aslr-on-linux-x86_64

ASLR bypass without infoleak

HyperDbg

State-of-the-art native debugging tool

iam-vulnerable

Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.

kernelpwn

kernel-pwn and writeup collection

lgromanowski.github.io

libpwntools

pwntools library implementation in c++

minimal-mistakes

:triangular_ruler: Jekyll theme for building a personal site, blog, project documentation, or portfolio.

mt940-rs

A MT940 parser in Rust

OSCE

Collection of Windows usermode exploits targeting various third-party software applications, these exploits were written in preparation for the Offsec CTP/OSCE certification

OSCP

My OSCP notes

osed-scripts

bespoke tooling for offensive security's Windows Usermode Exploit Dev course (OSED)

PEASS-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

prt

A passive-recon tool that parses through found assets and interacts with the Hackerone API.

remote_code_oxidation

rop-compiler

Return-oriented programming (ROP) compiler

Tools

Web-App-Methodology

Collection of web app methodology from initial recon into exploit known vulnerability. Used when conducting Bug Bounty, Penetration Testing, or CTF