Rich Warren

chlonium. Chromium Cookie import / export tool

spoolsystem. Print Spooler Named Pipe Impersonation for Cobalt Strike

CVE-2018-0802. PoC Exploit for CVE-2018-0802 (and optionally CVE-2017-11882)

CVE-2017-8570. Proof of Concept exploit for CVE-2017-8570

cs-rdll-ipc-example. Example code for using named pipe output with beacon ReflectiveDLLs

CVE-2017-11882. Proof-of-Concept exploits for CVE-2017-11882

mimikittenz. A post-exploitation powershell tool for extracting juicy info from memory.

impacket. Impacket is a collection of Python classes for working with network protocols.

au3decrypt. Decrypt AutoIt malware

DCRACKI. C#

ManualVEH. C++

LinEnum. Scripted Local Linux Enumeration & Privilege Escalation Checks

cookie-monster. BOF to steal browser cookies & credentials

vlan-hopping. Easy 802.1Q VLAN Hopping

OktaPostExToolkit. Python

pyMalleableC2. Python interpreter for Cobalt Strike Malleable C2 Profiles. Allows you to parse, build and modify them programmatically.

LinkedInt. LinkedInt: A LinkedIn scraper for reconnaissance during adversary simulation

Misc-Powershell-Scripts. Random Tools

iloot. OpenSource tool for iCloud backup extraction

pulse-meter. Parses the System Snapshot from an Ivanti Connect Secure applicance to identify possible IOCs related to CVE-2023-46805, CVE-2024-21887 and CVE-2025-0282.

Ghostwriter. The SpecterOps project management and reporting engine