Thomas M

BOAZ_beta. Multilayered AV/EDR Evasion Framework (no longer actively maintained)

CrowdSentinels-AI-MCP. AI-powered threat hunting and incident response MCP server for Elasticsearch/OpenSearch

Akira-obfuscator. Another LLVM-obfuscator based on LLVM-17. A fork of Arkari

BOAZ. A Multilayered AV/EDR Evasion Framework and AV Testing Tool.

CNN-Dog-Human-detection-and-dogbreed-classification. In this project I will build a convolutional network that could detect human and dog images, and then detect and resembling the breeds of dog. User supplied images are allowed.

Augmented_Loader. An improved version of the amazing Inflative loading technique. The script converts a PE into a position independent shellcode in .bin.

stanford-cs-229-machine-learning. VIP cheatsheets for Stanford's CS 229 Machine Learning

obfuscator-bin2bin. fork of PE bin2bin obfuscator

gocheck. DefenderCheck but blazingly fast™

amber. Reflective PE packer.

Connect4. Monte Carlo Tree Search Based AI Connect 4 Bot

Reverse-Engineering-guide. A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM and embedded RISC-V architectures.

Project-tv-script-generation-RNN. This project implemented RNN and embedding to generates tv scripts based on the famous "Seinfeld" script from 9 seasons

Checklists. Red Teaming & Pentesting checklists for various engagements

Supernova. Real fucking shellcode encryption tool

GTFOBins.github.io. GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

Clefia_cipher_python_implementation_for_general_testing. Comparison tests on lightweight Clefia cipher proposed by SONY

codasm. Payload encoding utility to effectively lower payload entropy.

LOLBAS. Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

microsoft-professional-program-artificial-intelligence. Jupyter Notebook

gym. A toolkit for developing and comparing reinforcement learning algorithms.

ImmoralFiber. Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) PhantomThread (An evolved callstack-masking implementation)

MutationGate. Use hardware breakpoint to dynamically change SSN in run-time

Mangle. Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs

sharem. SHAREM is a shellcode analysis framework, capable of emulating more than 20,000 WinAPIs and virutally all Windows syscalls. It also contains its own custom disassembler, with many innovative features, such as being able to show the deobfuscated disassembly of an encoded shellcode, or integrating emulation data to enhance the disassembly.

ROP_ROCKET. ROP ROCKET is an advanced code-reuse attack framework, with extensive ROP chain generation capabilities, including for novel Windows Syscalls attack, a novel Heaven's Gate, and "shellcodeless" ROP. The framework utilizes emulation and obfuscation to help expand the attack surface.

CodeHawk-Binary. CodeHawk Binary Analyzer for malware analysis and general reverse engineering

CobaltWhispers. CobaltWhispers is an aggressor script that utilizes a collection of Beacon Object Files (BOF) for Cobalt Strike to perform process injection, persistence and more, leveraging direct syscalls (SysWhispers2) to bypass EDR/AV

LdrLockLiberator. For when DLLMain is the only way

elasticsearch. Free and Open Source, Distributed, RESTful Search Engine

DarkWidow. Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird + Spawns a sacrificial Process as target process + (ACG+BlockDll) mitigation policy on spawned process + PPID spoofing + Api resolving from TIB + API hashing

EDR-Preloader. An EDR bypass that prevents EDRs from hooking or loading DLLs into our process by hijacking the AppVerifier layer

InflativeLoading. Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.

Simple-neural-network-and-linear-regression-analysis-on-avocado-data-in-US. In this project we will concentrate on the time series forecasting analysis of avocado prices over 4 years period within the US region. The analysis is performed with simple linear regression model and one hidden layer neural network to demonstrate the different aspects of the existing data, and highlighted the area of improvements need to be done. The LR and NN are implemented from scratch without using any high level packages like Pytorch and Tensorflow in order to demonstrate the implementing processes.

Deploying-a-Sentiment-Analysis-Model. In this project you will construct a recurrent neural network for the purpose of determining the sentiment of a movie review using the IMDB data set. You will create this model using Amazon's SageMaker service. In addition, you will deploy your model and construct a simple web app which will interact with the deployed model.

hello-world. Tutorial repository, fun starts

MyHHC23-TXM-WriteUp. MyHHC23-TXM-WriteUp

AV-Parser. By using the custom AV parser script, we were able to streamline the VT results to AVClass and return the voted labels.

project-face-generation-with-DCGAN. In this project, we use deep convolutional generative adversarial networks to generate new images of faces.

shellcode. Shellcodes for Windows/Linux/BSD running on x86, AMD64, ARM, ARM64

Project-bike-sharing-rental. In this project, a neural network is built to carry out prediction problem on a real dataset for bike sharing problem over two years of period.

open-agent-fork. A fork of the open ai agent

Marvel-Incident-Response-Scripts. Pure Bash/PowerShell incident response scripts for Linux & Windows. Detect anomalies in processes, files, and persistence mechanisms. Creates baselines, scans for changes, and outputs actionable JSON for Elastic/SIEM integration. No external dependencies - runs anywhere. MITRE ATT&CK mapped.

haro-code. Gundam-themed terminal coding agent (from Claude code) with Haro personality