tomkallo Goto Github PK

poolmonxv3

Monitor Kernel pool allocations tags

poshadcs

A proof of concept on attack vectors against Active Directory by abusing Active Directory Certificate Services (ADCS)

pplfault

pplfaultdumpbof

pplib

Elevate a process to be a protected process

process_overwriting

Yet another variant of Process Hollowing

procinjectsyscall

professional-programming

A collection of learning resources for curious software engineers

protectmytooling

Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.

proxyforge

Solving IP Throttling with Rotating Proxies

psbits

Simple (relatively) things allowing you to dig a bit deeper than usual.

publications

Publications from Trail of Bits

pwndrop

Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.

pycript

Burp Suite extension that allows for bypassing client-side encryption using custom logic for manual and automation testing with Python and NodeJS. It enables efficient testing of encryption methods and identification of vulnerabilities in the encryption process.

pyjfuzz

PyJFuzz - Python JSON Fuzzer

pyobsplot

Observable Plot in Jupyter notebooks and Quarto documents

qrexfil

This tool is a command line utility that allows you to convert any binary file into a QRcode movie. The data can then be reassembled visually allowing exfiltration of data in air gapped systems

ransomware-simulator

Ransomware simulator written in Golang

recycledgate

Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll

red-team

redteam-research

Collection of PoC and offensive techniques used by the BlackArrow Red Team

reflexxion

RefleXXion is a utility designed to aid in bypassing user-mode hooks utilised by AV/EPP/EDR etc. In order to bypass the user-mode hooks, it first collects the syscall numbers of the NtOpenFile, NtCreateSection, NtOpenSection and NtMapViewOfSection found in the LdrpThunkSignature array.

report

Pentest Report Generator

ring0vba

CVE-2018-6066 using VBA

rita-j

Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.

roadtools

A collection of Azure AD tools for offensive and defensive security purposes

sast-using-ml

Application Security using Source code testing and Machine Learning.

satintel

SatIntel is an OSINT tool for Satellites 🛰. Extract satellite telemetry, receive orbital predictions, and parse TLEs 🔭

scikit-llm

Seamlessly integrate powerful language models like ChatGPT into scikit-learn for enhanced text analysis tasks.

scmkit

Source Code Management Attack Toolkit