pathtofile

bad-bpf

A collection of eBPF programs demonstrating bad behavior, presented at DEF CON 29

Sealighter

Sysmon-Like research tool for ETW

SealighterTI

Combining Sealighter with unpatched exploits to run the Threat-Intelligence ETW Provider

bpf-hookdetect

Dectect syscall hooking using eBPF

commandline_cloaking

A collection of projects demonstrating various commandline cloaking techniques on Linux

toucli

Use TouchID and the Secure Enclave to encrypt data from the commandline.

tf_wireguard

Simple Terraform Scripts to setup a WireGuard server on various cloud providers.

https.server

Python SimpleHTTPServer wrapped in TLS

ctlwatcher

Monitor Certificate Transparency logs for domains matching regexes.

etwRunner

Basic KrabsETW runner template

terraform-provider-bitlaunch

BitLaunch Terraform Provider

etw_watcher

Using GitHub Actions to create commit diffs

hijack-watcher

Rust version of HijackWatcher

sgproxy

Basic HTTP/S proxy. Created to add HTTP Auth to a request from a client that doesn't support supplying auth in URL, for example VScode's Juypyter Notebook Server browser.

sigstore-watcher

Watches SigStore Code Signing Logs

volatility_symbols

Volatility Symbol Generator for Linux Kernels

aws-lambda-webrunner

Bandit-Scan

Use Bandit to scan all new and updated packages in Python

cargo-template

My own Cargo-Generate template

certstream-go

Go library for connecting to CertStream

crystal-face

Garmin Connect IQ watch face

dictpath

Provides a simple path-like access to nested dictionary elements

Docker-OSX

Run macOS VM in a Docker! Run near native OSX-KVM in Docker! X11 Forwarding! CI/CD for OS X Security Research! Docker mac Containers.

ExampleChatApplication

A simple example chat application written for .NET Core to learn network protocol analysis.

homebrew-toucli

Toucli Homebrew Tap

json-log-exporter

Tails JSON log file and exports data in Prometheus format

KDU

Kernel Driver Utility

pathtofile

pathtofile profile repo

rustyshim

vscode-jupyter-remote-server

starts a private remote Jupyter notebook sever that you can connect to using VSCode's remote kernel mode