Ronnie Flathers

kerbrute. A tool to perform Kerberos pre-auth bruteforcing

windapsearch. Python script to enumerate users, groups and computers from a Windows domain through LDAP queries

impacket_static_binaries. Standalone binaries for Linux/Windows of Impacket's examples

go-windapsearch. Utility to enumerate users, groups and computers from a Windows domain through LDAP queries

serverless_toolkit. A collection of useful Serverless functions I use when pentesting

go-clr. A PoC package for hosting the CLR and executing .NET from Go

windows_sshagent_extract. PoC code to extract private keys from Windows 10's built in ssh-agent service

xxetimes. An interactive OOB XXE data exfiltration tool

dockerfiles. A collection of my Dockerfiles

kerberos_windows_scripts. Collection of scripts for interacting with AD Kerberos from Linux

pentest_charts. Some helpful Helm Charts for pentesters

tokenstorage. Example implementations of storing tokens in vanilla JS

opennms_hash_cracker. Python script to extract and bruteforce OpenNMS password hashes in users.xml

impacket. Impacket is a collection of Python classes for working with network protocols.

watchtower_vuln_webapp. Simple Vulnerable WebApp for Training

smb. Server Message Block version 2 and 3 protocol library for Go

CrackMapExec. A swiss army knife for pentesting networks

gokrb5. Pure Go Kerberos library for clients and services

Android-InsecureBankv2. Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities

blog.ropnop.com. CSS

gorestclient. Library for creating generic REST JSON clients

minisign. A dead simple tool to sign files and verify digital signatures.

dd-trace-java. Datadog APM client for Java

go-foo. Test delete me

snyk-broker-helm. Smarty

hcl. HCL is the HashiCorp configuration language.

drone-snyk. Go

terraform-provider-tls. Utility provider that works with Transport Layer Security keys and certificates. It provides resources that allow private keys, certificates and certficate requests to be created as part of a Terraform deployment.

django-DefectDojo. DefectDojo is an open-source application vulnerability correlation and security orchestration tool.

go-smb2. SMB2/3 client library written in Go.

gohugo-theme-ananke. Ananke: A theme for Hugo Sites

go-ntlmssp. NTLM/Negotiate authentication over HTTP

asn1-ber. ASN1 BER Encoding / Decoding Library for the GO programming language.

pywerview. A (partial) Python rewriting of PowerSploit's PowerView

go-ntlm. Go

oxml_xxe. A tool for embedding XXE/XML exploits into different filetypes

nginx_tty_docker. A Docker image that runs Nginx in front of GoTTY

beautifulhugo. Theme for the Hugo static website generator

Detours. Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.

bag-of-holding. An application to assist in the organization and prioritization of software security activities.

odin. A simple theme for Ghost made for geeks, hackers and developers (forked from Casper).

objection. 📱 objection - runtime mobile exploration

the-blog. The best blogging platform ever!

centos5_python27_docker. Python

go-crypto. Fork of go/x/crypto, providing an up-to-date OpenPGP implementation

ldap. Basic LDAP v3 functionality for the GO programming language.

invoicer. From Securing DevOps

smimesign. An S/MIME signing utility for use with Git

struc. Better binary packing for Go

virtual-environments. GitHub Actions virtual environments

goWMIExec. Go

ridenum. Rid_enum is a null session RID cycle attack for brute forcing domain controllers.