Tools for interacting with authentication packages using their individual message protocols

COFF and BOF Loader written in Nim

Collection of my CSS themes for Marp Markdown presentations

Google SafetyNet attestation workarounds for Magisk

mTLS-Encrypted Back-Connect SOCKS5 Proxy

Blazing fast, advanced Padding Oracle exploit

Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Local privilege escalation via PetitPotam (Abusing impersonate privileges).

Another Windows Local Privilege Escalation from Service Account to System

Local privilege escalation from SeImpersonatePrivilege using EfsRpc.

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

Abusing impersonation privileges through the "Printer Bug"

Porting of mimikatz sekurlsa::logonpasswords, sekurlsa::ekeys and lsadump::dcsync commands

PowerShell Script Obfuscator

REST Client Extension for Visual Studio Code

Identify technologies used on websites.

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

Dumping DPAPI credz remotely

a pptx to markdown converter

Automatically spawn a reverse shell fully interactive for Linux or Windows victim

CVE-2021-22205& GitLab CE/EE RCE

An Active Directory audit utility

Privilege Escalation Enumeration Script for Windows

Dump the memory of a PPL with a userland exploit

Burp Automator - A Burp Suite Automation Tool. It provides a high level CLI and Python interfaces to Burp Suite scanner and can be used to setup Dynamic Application Security Testing (DAST).

PlayStation 2 DVD Player Exploit