Nick Frichette

CVE-2019-5736-PoC. PoC for CVE-2019-5736

SneakyEndpoints. Hide from the InstanceCredentialExfiltration GuardDuty finding by using VPC Endpoints

aws_stealth_perm_enum. Research on the enumeration of IAM permissions without logging to CloudTrail

aws-api-models. A collection of documented and undocumented AWS API models

gitlab-runner-research. Research on abusing GitLab Runners

CVE-2020-11108-PoC. PoCs for CVE-2020-11108; an RCE and priv esc in Pi-hole

aws_api_shapeshifter. A small library to alter AWS API requests; Used for fuzzing research

ssm-agent-research. This is a custom SSM agent which is sorta functional

tools. A collection of pen-testing/hacking scripts. Various uses.

Specter. Specter is a prototype cryptocurrency developed to help people learn about Blockchain Technology.

aws-api-model-converter. Take undocumented APIs in the AWS Console and convert them to usable models for the AWS CLI.

enumate_iam_using_bucket_policy. Tool to enumerate IAM Users and Roles by Abusing S3 Bucket Policies

meltdown-spectre-poc. This is a combination of several different projects. It is intended to understand what the Meltdown and Spectre exploits are capable of.

deserialization_stuff. Research on deserialization attacks in Python and PHP

FriendlyExitNode. The source/config of the Friendly Exit Node project.

selfhosted-shodan-gather. Side project to catalog various selfhosted services on the internet using Shodan; Gather metrics on usage over time

Dungeons-and-Agents. Make Codex or Claude Code act as a virtual dungeon master for D&D 5e.

hackingthe.cloud. An encyclopedia for offensive and defensive security knowledge in cloud native technologies.

Linux-From-Scratch. A repository holding everything I used to complete Linux From Scratch 8.2 (http://linuxfromscratch.org)

crs. Random tools to make research/testing easier

sigv4-signing-examples. Original SIGv4 Signing Examples

open-cvdb. An open project to list all publicly known cloud vulnerabilities and CSP security issues

SPA-Directory-Enumerator. Tool to perform directory enumeration of single page web applications

TrailDiscover. An evolving repository of CloudTrail events with detailed descriptions, MITRE ATT&CK insights, real-world incidents, references and security implications

Cut-Out-C2. Covert command and control system for Red-Team Operations

appID-2-acctID. Resolve an AWS Amplify App ID to AWS Account ID

Bulldog-2-The-Reckoning. A vulnerable (on purpose) Node.js web application to teach about application security. A sequel to Bulldog.

Image-Difference-Finder. A program to find the differences in "spot the differences" pictures

easyPoll. A effective and simple polling tool for any environment

plagiarism-examples. This repo contains a list of examples of plagiarism from HackTricks.

Fallout_Terminal_Hacker. An Android application that solves the hackable terminal puzzles of the Fallout franchise using OCR and Probability Analysis.

Frichetten. Read Me :)

aws_certified_solutions_architect_notes. Notes for AWS Certified Solutions Architect Studying

Tor-Docker-Proxy. Another Tor installation in a Docker container.

Bulldog. The source code to a Vulnerable (on purpose) VM

WiFiReader. Identifies nearby WiFi signals

normalize_aws_api. A quick script to normalize the AWS API into a single json file

GoEncryptTheCloud. Using Go, encrypt files and move them to the cloud (S3)