Exploit and Check Script for CVE 2022-1388

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Multi-Cloud Security Auditing Tool

A tool for quickly evaluating IAM permissions in AWS.

Enumerate the permissions associated with AWS credential set

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

PowerSploit - A PowerShell Post-Exploitation Framework

A utility to convert your AWS CLI credentials into AWS console access.

Adversary Tactics - PowerShell Training

Ah shhgit! Find GitHub secrets in real time

[WIP] Crappy iOS app analyzer

Exploit for Pulse Connect Secure SSL VPN arbitrary file read vulnerability (CVE-2019-11510)

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

A collaborative, multi-platform, red teaming framework

Dump Azure AD Connect credentials for Azure AD and Active Directory

The great impacket example scripts compiled for Windows

PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.

The new bridge between Burp Suite and Frida!

Slide deck and demo code for my DEFCON 26 talk

VerSprite Security Research

Set of tools to analyze and attack Windows sandboxes.

Tool to check AWS S3 bucket permissions

Tools and Materials for the Frida Engage Blog Series

iOS 11.1.2 (15B202) Jailbreak

This project contains pocs and exploits for android vulneribilities

PowerShell Script to Dump Windows Credentials from the Credential Manager

The cheat sheet about Java Deserialization vulnerabilities

A collection of resources for OSX/iOS reverse engineering.

A project that uses Binary Ninja and GRAKN.AI to perform static analysis on binary files with the goal of identifying bugs in software.