Andy | ZephrFish

BugBountyTemplates. A collection of templates for bug bounty reporting

GoogD0rker. Note: Going through a full re-write of the tooling so the current versions in the repo do not work!

OmniProx. IP Rotation from different providers - Like FireProx but for GCP, Azure, Alibaba and CloudFlare

Bloodhound-CustomQueries. Custom Queries - Brought Up to BH4.1 syntax

DockerAttack. Various Tools and Docker Images

CVE-2020-1350_HoneyPoC. HoneyPoC: Proof-of-Concept (PoC) script to exploit SIGRed (CVE-2020-1350). Achieves Domain Admin on Domain Controllers running Windows Server 2000 up to Windows Server 2019.

Wordlists. Various Payload wordlists

pyLDAPGui. Python based GUI for browsing LDAP

static-tools. Static compiled binaries + scripts ready to use on systems

QoL-BOFs. Curated list of public Beacon Object Files(BOFs) build in as submodules for easy cloning

WindowsHardeningScript. Some settings stolen from multiple scripts @ZephrFish

LOLSearches. Living off the land searches for explorer and sharepoint

BurpFeed. Hacked together script for feeding urls into Burp's Sitemap

AzureAttackKit. Collection of Azure Tools to Pull down for Attacking an Environment + quick tips and other useful information

RandomScripts. Random Shell Scripts and other ideas I have along the way

XSSPayloads. Cross Site Scripting Payloads -- Variations

F5-CVE-2022-1388-Exploit. Exploit and Check Script for CVE 2022-1388

GoClipC2. Clipboard for Command and Control between VDI, RDP and Others on Windows

AttackDeploy. Scripts for Deploying new server

Stompy. Timestomp Tool to flatten MAC times with a specific timestamp

CVE-2021-22893_HoneyPoC2. DO NOT RUN THIS.

ADFSDump-PS. PowerShell Implementation of ADFSDump to assist with GoldenSAML

GoogD0rk. Python

DynamicMSBuilder. A Dynamic MSBuild task to help with minor obfuscation of C# Binaries to evade static signatures on each compilation

AutoHoneyPoC. AutoPoC Generator HoneyPoC

CVE-2023-20198-Checker. CVE-2023-20198 & 0Day Implant Scanner

CVE-2024-4577-PHP-RCE. PHP RCE PoC for CVE-2024-4577 written in bash, go, python and a nuclei template

HelloJackHunter. Research into WinSxS binaries and finding hijackable paths

SandboxSpy. Code for profiling sandboxes - Initially an idea to profile sandboxes, the code is written to take enviromental variables and send them back in a Base32 string over HTTP to an endpoint.

Exch-CVE-2021-26855. CVE-2021-26855: PoC (Not a HoneyPoC for once!)

ChunkyIngress. Leverages B64 chunks to split files and save to clipboard

bug-bounty-reference. Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

CVE-2020-16898. HoneyPoC 2.0: Proof-of-Concept (PoC) script to exploit IPv6 (CVE-2020-16898).

Blog_Backup. A repository with various tutorials on how to do things in Pentesting, setup environments and other things

RepoMan. Repo hacks

CVE-2023-34362. CVE-2023-34362: MOVEit Transfer Unauthenticated RCE

CVE-2025-53770-Scanner. ToolShell scanner - CVE-2025-53770 and detection information

CVE-2021-41773-PoC. Python

SCCMSiteCodeHunter. C#

PotUtils. Go

NessusPreFlight. Nessus Preflight(NPF) Check for local and remote systems. Essentially sets three registry keys and restarts a service to allow nessus to scan a machine

edr-checker. Gets the name of all currently running process then checks them against a list of known defensive products such as AV's, EDR's and logging tools.

PurpleTeamWorkshop-LabManual. Purple Team Workshop by @jorgeorchilles

Red-Teaming-Toolkit. This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

MoveIT-WebShellCheck. Python

Lepus. Subdomain finder

CVE-2021-28480_HoneyPoC3. DO NOT RUN THIS.

NOPe. NOPe - Testing some alternate NOP opcodes

XSS. A collection of XSS Attack vectors

blind. A BOF for patching AMSI, ETW and NtTraceEvent aka Sysmon using Trampolines

xss-proxy. BeEF-inspired XSS proxy service

Autopeeper. Automated Screenshot Tool

MediaCenterSetup. A setup script for Plex, Sonarr, Radarr & Jackett

OffensiveSysAdmin. A collection of tools Neil and Andy have been working on released in one place and interlinked with previous tools

NotProxyShellScanner. Python implementation for NotProxyShell aka CVE-2022-40140 & CVE-2022-41082

LogsSteelcon.

PowerSploit_Sensitive_Info_Hunter. Modifed PowerSploit/PowerView to search files and match RegEx for Sensitive info (PII, PCI, Passwords, Usernames, SNMP Strings, etc.)

Exch-CVE-2021-26855_Priv. patched to work

Mailgun-python. Python Wrapper for sending email with mailgun

UnhookingPatch. Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime