Robert

Infosec_Reference. An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

tldw_server. tl/dw (Too Long, Didn't Watch): Your Personal Research Multi-Tool - a naive attempt at 'A Young Lady's Illustrated Primer' (Open Source NotebookLM)

Cheatsheets. Penetration Testing/Security Cheatsheets

hyperdbg. Automatically exported from code.google.com/p/hyperdbg

tldw_chatbook. Standalone Client for tldw_server; NotebookLM(+more) in your terminal; No tracking/Can run entirely offline

Go-Go-GadgetGospel. Quick Start/Setup of CI/CD for Offensive/Defensive Purposes

BloodHound-Investigator. Tool to help researchers and journalists better understand large datasets

Lets-Transcribe-InfoSec-Cons. Let's transcribe every single defcon talk and make them easily searchable by title, content, or author!

handbook. The CryptoParty Handbook

MIS. Python

literature_review. Survey of program analysis research with a focus on machine code

SuperProfile.

GTFOBins.github.io. Curated list of Unix binaries that can be exploited to bypass system security restrictions

security-checklist. A checklist for staying safe on the internet

MBE. Course materials for Modern Binary Exploitation by RPISEC

android_notes. Wiki pages about Android internals

how-to-secure-anything. How to systematically secure anything: a repository about security engineering

physical-docs. This is a collection of legal wording and documentation used for physical security assessments. The goal is to hopefully allow this as a template for other companies to use and to protect themselves when conducting physical security assessments.

assessment-mindset. Security Mindmap that could be useful for the infosec community when doing pentest, bug bounty or red-team assessments.

AceLdr. Cobalt Strike UDRL for memory scanner evasion.

bountycatchremix. Python

Advanced-Process-Injection-Workshop. C++

DomainPasswordSpray. DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. It will automatically generate a userlist from the domain which excludes accounts that are expired, disabled locked out, or within 1 lockout attempt.

Dr.-Watson. Dr. Watson is a simple Burp Suite extension that helps find assets, keys, subdomains, IP addresses, and other useful information! It's your very own discovery side kick, the Dr. Watson to your Sherlock!

architecture_decision_record. Architecture decision record (ADR) examples for software planning, IT leadership, and template documentation

PowerExfil. A collection of data exfiltration scripts for Red Team assessments.

Social-Engineering-Payloads. Collection of social engineering payloads

ProcessHider. Post-exploitation tool for hiding processes from monitoring applications

evil-winrm. The ultimate WinRM shell for hacking/pentesting

4K-Botnet. A simple and easy to use JS Botnet

sploit-tools. My own tools for easing the task of pentesting / exploit writing

AndroidKernelExploitationPlayground. C

Real-Time-Voice-Cloning. Clone a voice in 5 seconds to generate arbitrary speech in real-time

AllTheThings. Copy of Subtee's Repository That's Taken Down

RedTeam-BCS. BCS（北京网络安全大会）2019 红队行动会议重点内容

Pentesting_Toolkit. 🏴‍☠️ Tools for pentesting, CTFs & wargames. 🏴‍☠️

SharpAttack. A simple wrapper for C# tools

Windows-10-Exploitation.

WindowsExploitationResources. Resources for Windows exploit development

SecureAllTheThings. Secure all the things

Windows10Exploits. Microsoft » Windows 10 : Security Vulnerabilities

alerting-detection-strategy-framework. A framework for developing alerting and detection strategies for incident response.

redteam-plan. Issues to consider when planning a red team exercise.

DeviceDetector.NET. The Universal Device Detection library will parse any User Agent and detect the browser, operating system, device used (desktop, tablet, mobile, tv, cars, console, etc.), brand and model.

Misc_Scripts. Dumping

Pentest-and-Development-Tips. A collection of pentest and development tips

ActiveReign. A Network Enumeration and Attack Toolset

ApplicationWhitelistBypassTechniques. A Catalog of Application Whitelisting Bypass Techniques

404. 404 File not found C2 PoC

ReconNotes. Just some public notes that can be useful and i want let the world knows.

tldw_BrowserExtension. Browser Extension to interact with the tldw server

pyChunkViz. Chunk Visualizer written in python

YetAnotherWildcardCollection. Goal: Create a comprehensive wildcard collection not focused on NSFW

Windows-Hacks. Creative and unusual things that can be done with the Windows API.

Phish-Map. Mapping Phishing Pretexts

AMSI-ETW-Patch. Patch AMSI and ETW

Damn-Vulnerable-LLM-App. An application that uses LLM agents and other pieces to perform processing of data, that is damn vulnerable.

dom-to-semantic-markdown. DOM to Semantic-Markdown for use with LLMs (Python version)

gguf-mmlu-pro. GGUF based MMLU-Pro benchmark tool