Concierge Toolkit: Physical Access Control Identification and Exploitation

Snaffler reimplementation in Python - https://github.com/SnaffCon/Snaffler

A proof-of-concept script to conduct a phishing attack abusing Microsoft 365 OAuth Authorization Flow

Ingest openldap data into bloodhound

A low poly LED mask made completely out of circuit boards. Second version of a series of high tech face changing masks.

GoldenSAML Attack Libraries and Framework

Research on the Gallagher / Cardax access control system

A small script that automates Entra ID persistence with Windows Hello For Business key

swagroutes is a command-line tool that extracts and lists API routes from Swagger files in YAML or JSON format.

Password spraying tool for Microsoft Online accounts (Entra/Azure/O365)

Claude MCP server to perform analysis on ROADrecon data

A python port of @dafthack's MFAsweep with some added OPSEC functionality. MFAde can be used to find single-factor authentication failure points in Mircrosoft Services.

A python library for converting between WCF binary xml and plain xml.

A real exploit for BitBucket RCE CVE-2022-36804

Full Spectrum Signal Detector using HackRF SDR

The python library to simulate NFS client, currently only support NFSv3

a subdomain enumeration tool with lots of pep

Uniden Bearcat API

Dump configuration from STOP Djvu ransomware sample

Python3 library to communicate with Digital Logic µFR-series NFC readers (https://www.d-logic.net/)