eversinc33

BouncyGate. Indirect Syscalls: HellsGate in Nim, but making sure that all syscalls go through NTDLL (as in RecycledGate).

Godmode. Tool for playing with Windows Access Token manipulation.

SharpStartWebclient. Programmatically start WebClient from an unprivileged session to enable that juicy privesc.

CredGuess. Generate password spraying lists based on the pwdLastSet-attribute of users.

NimNightmare. CVE-2021-1675 LPE PoC in Nim (PrintNightmare Local Privilege Escalation)

OffensiveHolyC. Red-Teaming TempleOS.

RDPassSpray. Python3 tool to perform password spraying using RDP

deepsea. Deepsearch leak database client, as an alternative for pwndb

UwuRatel. Pink BRC4 skin/theme.

Talks. Repository for slide decks of public talks I've given.

Kernel-Adventures. Misc Windows Driver/Kernel PoCs that do not need a separate repo.

JailWhale. Docker container escape enumeration tool.

urlExtract. Recursively extract urls from a web page for reconnaissance.

ghidra-WDF-gdt. Ghidra .gdt files for parts of the Kernel Mode Driver Framework (KMDF) part of WDF.

Web-Windows-Login-Phishing. Web based fake Windows Login Screen Phishing.

nim-monero-rpc. Nim library for interacting with Monero wallets & nodes via RPC.

scim. WIP raw socket packet manipulation library

lunarfuzz. WIP: Directory fuzzer for single page apps that require a browser to render content, with an interface similar to ffuf

YA-PSX-EMU. Playstation (PSX) Emulator (WIP).

OpenGL-Voxel-Engine. Voxel Game-Engine using OpenGL, created as a project to practice C++ and graphics programming.

Black-Metal-Lyric-Database. Database of Black Metal lyrics and additional metadata in .JSON-format for computer assisted text analysis projects.

monero. Monero: the secure, private, untraceable cryptocurrency

PyCheeseOunce. Another coercion method, using MS-EVEN ElfrOpenBELW.

QuickShell. Generates quick one liner reverse shell payloads for lazy people.

elden_vt. JavaScript

toolbox-pentest-web. Docker toolbox for pentest of web based application.

Bitmancer. Nim Library for Offensive Security Development

CheeseOunce. Coerce Windows machines auth via MS-EVEN

SharpTokenFinder. C# implementation of TokenFinder. Steal M365 access tokens from Office Desktop apps

CrystalCastle. Your automated network enumeration watchtower.

HyperDash. Auto-Dash-Bot for Hyper Light Drifter.

nuclei-templates. Community curated list of templates for the nuclei engine to find security vulnerabilities.

PrivescCheck. Privilege Escalation Enumeration Script for Windows

KrbRelay. Framework for Kerberos relaying

aadint. PowerShell

Post-Exploitation. Post-exploitation modules I wrote for educational purposes.

PSX-DEV. PSX homebrew development stuff.

kerbrute. A tool to perform Kerberos pre-auth bruteforcing

powershell-intune-samples. This repository of PowerShell sample scripts show how to access Intune service resources. They demonstrate this by making HTTPS RESTful API requests to the Microsoft Graph API from PowerShell.

myaut_contrib. mod to myaut2exe decompiler