Small and highly portable detection tests based on MITRE's ATT&CK.

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

A tool to dump the login password from the current linux user

Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)

HackSys Extreme Vulnerable Driver (HEVD) - Windows & Linux

NCD scripting language, tun2socks proxifier, P2P VPN

Windows Event Log Killer

Simple reverse ICMP shell

My proof-of-concept exploits for the Linux kernel

Official repository for libIEC61850, the open-source library for the IEC 61850 protocols

A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.

Windows 10 UAC bypass for all executable files which are autoelevate true .

Replay RDP traffic from PCAP

an IEC-61850 dissector for wireshark

A formally verified implementation of a bolt-on security device for ICS networks. Designed with TLA+ and written/proved in F*