Search Engine Optimization (SEO) for Ruby on Rails applications.

Official repository for the aws-sdk-rails gem, which integrates the AWS SDK for Ruby with Ruby on Rails.

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

PowerShell Script to Dump Windows Credentials from the Credential Manager

JMX enumeration and attacking tool.

Hundreds of models & providers. One command to find what runs on your hardware.

That repository contains my updates to the well know java deserialization exploitation tool ysoserial.

A python3 and bash PoC for CVE-2021-4034 by Kim Schulz

This is a weaponized WSUS exploit

Codebase to generate an msdt-follina payload

Follina (CVE-2022-30190) is a Microsoft Office zero-day vulnerability that has recently been discovered. It’s a high-severity vulnerability that hackers can leverage for remote code execution (RCE)…

Penelope Shell Handler

Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)

This Python PoC exploits CVE-2024-46987, a Path Traversal bug in Camaleon CMS 2.8.0 < 2.8.2 (work on 2.9.0). It allows authenticated users to read sensitive server files via the MediaController. In…

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

MDB Tools - Read Access databases on *nix

VNC Password Decrypter

Active Directory information dumper via LDAP

WiFi Geolocation Spoofing with the ESP8266

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity

RunasCs - Csharp and open version of windows builtin runas.exe

Active Directory data ingestor for BloodHound Community Edition written in Rust. 🦀

firepwd.py, an open source tool to decrypt Mozilla protected passwords

Tools for Kerberos PKINIT and relaying to AD CS

pwning IPv4 via IPv6

Active Directory certificate abuse.