FindUncommonShares is a Python script allowing to quickly find uncommon shares in vast Windows Domains, and filter by READ or WRITE accesses.

Python app to work with pictures and associated metadata from Apple Photos on macOS. Also includes a package to provide programmatic access to the Photos library, pictures, and metadata.

A basic tool to check security headers of a website

Pentesting cheatsheet with all the commands I learned during my learning journey. Will try to to keep it up-to-date.

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

socks5 over websocket

mTLS-Encrypted Back-Connect SOCKS5 Proxy

Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities.

Never ever ever use pixelation as a redaction technique

Fetch all the URLs that the Wayback Machine knows about for a domain

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

Protect and discover secrets using Gitleaks 🔑

CVE-2022-42889 - Text4Shell exploit

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

Python's http.server extended to include a file upload page

The BackupOperatorToolkit contains different techniques allowing you to escalate from Backup Operator to Domain Admin

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.

Updog is a replacement for Python's SimpleHTTPServer. It allows uploading and downloading via HTTP/S, can set ad hoc SSL certificates and use http basic auth.

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

PoC for the CVE-2022-41080 , CVE-2022-41082 and CVE-2022-41076 Vulnerabilities Affecting Microsoft Exchange Servers

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

Orange Cyberdefense mindmaps

OSINT Framework

Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and exploitation of information systems.

Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.

Obfuscate powershell scripts by replacing Function names, Variables and Parameters.

Veil 3.1.X (Check version info in Veil at runtime)

This is a repo containing several osint sources

Password decryption tool for the McAfee SiteList.xml file