Rob Fuller

post-exploitation. Post Exploitation Collection

shellshocker-pocs. Collection of Proof of Concepts and Potential Targets for #ShellShocker

post-exploitation-wiki. Post Exploitation Wiki

solarflare. SolarWinds Orion Account Audit / Password Dumping Utility

netview. Netview enumerates systems using WinAPI calls

IOXIDResolver. IOXIDResolver.py from AirBus Security

vt-notify. Get email notification when Virus Total has a copy of your binary.

pykek. Kerberos Exploitation Kit

CVE-2021-44228-Log4Shell-Hashes. Hashes for vulnerable LOG4J versions

osx-wificleaner. Cleans out "open" wireless connections from OSX machine

howtowinccdc. Notes, Slides, Comments and Commands on How to Win CCDC

nfsclient. NFS client written in Go

repos. List of Repositories

cfdb. Common Findings Database

akb. Attack Knowledge Base

redteam-collab. Red Team Collaboration Infrastructure

ditto. Binary resource copier

Not-In-Pentesting-Class. The Dirty Secrets They Didn't Teach You In Pentesting Class

open-ssids. SSIDs for the Hak5 Wifi Pineapple's PineAP setup

sectaskbars. Security Product Taskbar Icons (to identify from screenshots)

WhiteChapel. password cracking front end

tools. Operational toolset utilizing git's submodule feature

FakeNetBIOS. See here:

manage2decrypt. ManageEngine OpManager Decryption Tools

stuff. Things I've coded, or use (cause I can't find them online anymore)

DeleteThatTweet. Monitors a Twitter stream and saves off any tweet that is deleted.

windows-hardening. Because I can't find scripts to do this anywhere else...

certexp. Certificate Export Utility

windows-declutter. Windows 10 De-Clutter script

securitytitles.com. Standardizing Security Titles

mubix.github. Malicious Link Blog

attackbox. Ansible scripts to build an attack box

ntds_decode. Decrypt NTDS hashes

ccdc_malware. Talk given at DerbyCon and RuxCon 2016

lmo. LetMeOutOfYour.net Resources

whitechapel-ng. Next Generation of White Chapel

local-hibp. How to set up a local copy of Have-I-Been-Pwned's password checking service

metasploitwiki. Clone of Metasploit's wiki w/ additions

htshells. Self contained htaccess shells and attacks

GScriptOldEmal. Deletes old email from my Gmail accounts

Interceptor. PowerShell HTTP(s) Intercepting Proxy

hackingtogether. #HackingTogether

PCredz. This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.

ctf. Capture The Flag Information

twitter-list-follow. Follow all members of a list

SecLists. SecLists is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

metasploit-framework. Metasploit Framework

elgamalcrypto. Simple Python Elgamal Encryption and Decryption Tool

scoreproxy. CCDC Scorebot SOCKS5 checks proxy

presentations. Public copies of my previous presentations

evil-winrm. The ultimate WinRM shell for hacking/pentesting

decryptcpuu. Decrypt "Unrestricted" CPUU.ini passwords

getPatrons. Pulls down list of Patrons in tab formatted list