Deepfakes Software For All

PoC for CVE-2022-40684 - Authentication bypass lead to Full device takeover (Read-only)

A proof of concept exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager

Symbolic execution tool

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

A vulnerability scanner for container images and filesystems

Mastering Ethereum, by Andreas M. Antonopoulos, Gavin Wood

Security analysis tool for EVM bytecode. Supports smart contracts built for Ethereum, Hedera, Quorum, Vechain, Roostock, Tron and other EVM-compatible blockchains.

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

Azure Security Resources and Notes

Proof-of-concept obfuscation toolkit for C# post-exploitation tools

A collection of resources, tools and more for penetration testing and securing Microsofts cloud platform Azure.

NessusV2 File Parser

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

pwning IPv4 via IPv6

Identify the attack paths in BloodHound breaking your AD tiering

Six Degrees of Domain Admin

A collection of scripts for assessing Microsoft Azure security

Pentesting cheatsheet with all the commands I learned during my learning journey. Will try to to keep it up-to-date.

A tool for collecting RDP, web and VNC screenshots all in one place

Certified Red Team Operator

Custom Query list for the Bloodhound GUI based off my cheatsheet

A setup script and simple web UI for setting up an OpenVPN Server