Source code for webpage

Web Attack Cheat Sheet

A Proof-Of-Concept for the CVE-2021-44228 vulnerability.

A Zsh theme

Achieving a Reverse Shell Exploit for Apache ActiveMQ (CVE_2023-46604)

Joomla! < 4.2.8 - Unauthenticated information disclosure

A proof of concept for CVE-2023–1326 in apport-cli 2.26.0

Powerline is a statusline plugin for vim, and provides statuslines and prompts for several other applications, including zsh, bash, tmux, IPython, Awesome and Qtile.

This Python tool enables network node command and exfiltration while applying OPSEC to ensure the process is hidden by transmitting commands through window flags.

A curated list of resources for DFIR through Microsoft Defender for Endpoint leveraging kusto queries, powershell scripts, tools such as KAPE and THOR Cloud and more.

Logging Made Easy (LME) is a free and open logging and protective monitoring solution serving all organizations.

A collection of domains used for explicit adult content like porn websites.

GameOver(lay) Ubuntu Privilege Escalation

A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats. Supports: ZIP, 7zip, PDF, ISO, IMG, CAB, VHD, VHDX

Vagrant is a tool for building and distributing development environments.

Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.

Fast Incident Response

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

Original PoC for CVE-2023-32784

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming la…

RedCloudOS is a Cloud Adversary Simulation Operating System for Red Teams to assess the Cloud Security of Leading Cloud Service Providers (CSPs)

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

Proof-of-Concept for Server Side Request Forgery (SSRF) in request-baskets (<= v.1.2.1)

Minor tweaks to get this excellent Python bytecode decompiler running under Python 3.8-3.10

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique present…

Kali Linux Fixes for Newly Imported VM's