(WIP) Runtime Application Instruments for iOS. Previously Passionfruit

A Frida script that disables Flutter's TLS verification

A collection of android security related resources

HookChain: A new perspective for Bypassing EDR Solutions

curiosity got me here

Lateral Movement via the .NET Profiler

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

A fast TCP/UDP tunnel over HTTP

COFF file (BOF) for managing Kerberos tickets.

This project aims to compare and evaluate the telemetry of various EDR products.

Detect and respond to Cobalt Strike beacons using ETW.

Cobalt Strike UDRL for memory scanner evasion.

The Havoc Framework.

Sleep Obfuscation

Aims to identify sleeping beacons

Stealing Signatures and Making One Invalid Signature at a Time

Sample code referenced by the .NET documentation

A minimal kvm example

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

Cloudlist is a tool for listing Assets from multiple Cloud Providers.

This project is a template for a simple portfolio of pictures and p5.js sketches.

AD ACL abuse

SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications

Convert Cobalt Strike profiles to IIS web.config files

Golang based autonomous FTP server with SFTP, S3, Dropbox, and Google Drive connectors.

A .net OLE/COM viewer and inspector to merge functionality of OleView and Test Container

A simple program to hook the current process to identify the manual syscall executions on windows

NINA: No Injection, No Allocation x64 Process Injection Technique