Simple (relatively) things allowing you to dig a bit deeper than usual.

Windows Exploit Suggester - Next Generation

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

IATelligence is a Python script that will extract the IAT of a PE file and request GPT to get more information about the API and the ATT&CK matrix related

Villain is a Windows & Linux backdoor generator and multi-session handler that allows users to connect with sibling servers (other machines running Villain) and share their backdoor sessions, handy…

Automation to assess the state of your M365 tenant against CISA's baselines

A Python3 based C2 server to make life of red teamer a bit easier. The payload is capable to bypass all the known antiviruses and endpoints.

A collection of CTF write-ups, pentesting topics, guides and notes. Notes compiled from multiple sources and my own lab research. Topics also support OSCP, Active Directory, CRTE, eJPT and eCPPT.

Compiled Binaries for Ghostpack (.NET v4.0)

My OSCP Pre-Preparation Phase. I'm not sure if I'll be able to afford the exam but what count's trying and learning things. I'm gonna give it a try. [Start Date: 21st March 2022]

Monitor linux processes without root permissions

RunasCs - Csharp and open version of windows builtin runas.exe

Redis(<=5.0.5) RCE

game of active directory

OSCP repo with cheat sheets and resources for studying.

List of Stuff I did to get through the OSCP :D

Writeups of OSCP-like machines

Deserialization payload generator for a variety of .NET formatters

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues and hard-coded secrets

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Fast and customizable vulnerability scanner based on simple YAML based DSL.

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Defeating Windows User Account Control

Most of the notes, resources and scripts I used to prepare for the OSCP and pass it the first time.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF