puzzlepeaches

open-webui

User-friendly WebUI for LLMs (Formerly Ollama WebUI)

full-stack-fastapi-template

Full stack, modern web application template. Using FastAPI, React, SQLModel, PostgreSQL, Docker, GitHub Actions, automatic HTTPS and more.

rye

a Hassle-Free Python Experience

teslamate

A self-hosted data logger for your Tesla 🚘

xzbot

notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)

emba

EMBA - The firmware security analyzer

teslausb

A smart USB drive for Tesla Dashcam - extended storage, auto archive, web viewer

fly-tailscale-exit

Run a VPN with global exit nodes with fly.io, tailscale and github!

lapdev

Self-Hosted Remote Dev Environment

room-assistant

Presence tracking and more for automation on the room-level

ha-floorplan

Bring new life to Home Assistant. By mapping entities to a SVG-object, you're able to control devices, show states, calling services - and much more. Add custom styling on top, to visualize whatever you can think of. Your imagination just became the new limit.

endlessh-go

A golang implementation of endlessh exporting Prometheus metrics, visualized by a Grafana dashboard.

BlueSpy

PoC to record audio from a Bluetooth device

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

Microsoft-Outlook-Remote-Code-Execution-Vulnerability

Misconfiguration-Manager

Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.

SOAPHound

SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Directory Web Services (ADWS) protocol.

fuzzuli

fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.

tesla

Tesla custom integration for Home Assistant. This requires a refresh token be generated by third-party apps to login.

Vulnerable-OAuth-2.0-Applications

vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.

dropper

Project that generates Malicious Office Macro Enabled Dropper for DLL SideLoading and Embed it in Lnk file to bypass MOTW

family-of-client-ids-research

Research into Undocumented Behavior of Azure AD Refresh Tokens

ccmpwn

portsscan

A web client port-scanner written in GO, that supports the WASM/WASI interface for Browser WebAssembly runtime execution.

can_ada

Python bindings for Ada, a fast and spec-compliant URL parser.

sunlight

A Certificate Transparency log implementation and monitoring API designed for scalability, ease of operation, and reduced cost.

git-rotate

Leveraging GitHub Actions to rotate IP addresses during password spraying attacks to bypass IP-Based blocking

mail-in-the-middle

wadl-dumper

Dump all available paths and/or endpoints on WADL file.

msal-requests-auth

Authentication using python requests and MSAL. This uses the MSAL cache for repeated requests.

lucee-webshells

A tool for building Lucee extensions including remote code execution