Jakob Friedl

conquest. Conquest is a feature-rich and malleable command & control/post-exploitation framework developed in Nim.

precompiled-binaries. Collection of useful pre-compiled .NET binaries or other executables for penetration testing Windows Active Directory environments

BenevolentLoader. Shellcode loader using direct syscalls via Hell's Gate and payload encryption.

tgt-monitor-bof. Async BOF implementation of 'Rubeus monitor' to detect and automatically extract Kerberos TGTs as they appear on a target system.

usb-monitor-bof. Async BOF that monitors USB device connect/disconnect events, reports device information and performs actions on connected USB storage volumes.

keelog-bof. Async BOF to capture KeePass master passwords by detecting and keylogging locked database windows.

logon-monitor-bof. Async BOF that notifies the operator when a user connects to a local or remote target system.

async-bof-loader. Object file loader implemented as a post-ex DLL for asynchronous BOF execution.

conquest-modules. Modules designed to be used with the Conquest framework.

clipboard-monitor-bof. Async BOF to monitor and detect clipboard changes on a target system and return the clipboard contents.

malware-development. Progressing on my malware development journey.

asyncscan-bof. Async port scanner BOF. Supports IP/port ranges, CIDR notation and hostnames.

havoc-NoPowerShell. Havoc plugin allowing in-memory execution of PowerShell cmdlets

mitre4havoc. Havoc plugin that adds all MITRE ATT&CK enterprise tactics and techniques to the user interface.

IndirectUnhook. NTDLL unhooking from suspended process via indirect syscalls.

maldev-for-dummies. Solutions for the Malware Development for Dummies workshop exercises.

parcel-logistics-service. Full stack ASP.NET application that allows users to submit, track and move parcels on a predicted route based on geo-coordinates.

advent-of-code-2022. My solutions to problems from AOC 2022

tour-planner. .NET desktop application for creating and managing tours with real data from the MapQuest API.

jakobfriedl.github.io. Personal website & blog

advent-of-code-2023. Another year, another attempt to solve challenges from adventofcode.com. Mostly in Nim 👑

ML-BD-for-code-quality. Python

tw-mailer. C

my-find. C