Karol Mazurek

Snake_Apple. Articles and tools related to research in the Apple environment (mainly macOS).

crimson. Web Application Security Testing Tools

evasion. AV Evasion Techniques

crimson_cracking. All around cracking wordlist.

crimson_lisp. Linux Post-Exploitation tools wrapper

crimson_wisp. Windows Post-Exploitation tools wrapper

sandblaster. Reversing the Apple sandbox

MBE. Solutions for http://security.cs.rpi.edu/courses/binexp-spring2015/

sb_validator. A macOS sandbox filter validation tool that tests sandbox rule enforcement using the sandbox_check() API.

C_HUNTER. Notes for hunting vulnerabilities in C-Family software / low level.

PYTHON_TEMPLATE_FUZZING_FRAMEWORK. Fast, flexible black-box fuzzing framework. Write a template binary that handles your protocol/target and use built-in policies to fuzz it.

2bfuzz. Simple TCP fuzzer and a payload generator.

crimson_prober. Asynchronous TCP scanner through SOCKS5 proxies

path_sqlmaper. A simple Python script for URL wildcard generation.

MTA_tester. Mail Transfer Agent OOB tester.

burp_extensions_downloader. It is s a simple script to automatically download selected, up-to-date Burp Suite Extensions (handy for internal tests).

dylibtree. Inspect dynamic dependencies of Mach-O binaries recursively

Credits.

looper.

macOS_HR_bypass_net_maui. Proof of Concept that shows vulnerability in Hardened Runtime protections on macOS via apps built in the Microsoft .NET MAUI framework.