Michael Taggart

OffensiveNotion. Notion as a platform for offensive operations

wtfbins. WTF are these binaries doing?! A list of benign applications that mimic malicious behavior.

pwst-resources. Resources for Students in the Practical Webapp Security and Testing course

blue-jupyter. Jupyter Notebooks for the Blue Team

security-tools. A very opinionated list of security tools

crux. A proof-of-concept malicious Chrome extension

venture. Venture: Cross-Platform GUI tool for parsing and analyzing Windows event logs

seclab. Automated security lab provisioning

rustyneedle. A Rust-based dropper for shellcode payloads.

quasar. quASAR: ASAR manipulation made easy

electron-app-tracker. Jupyter Notebook

bolus. Library for shellcode injection

jupyter-pancakes. Jupyter demo repository for PancakesCon2020

lcars-css. LCARS-like styling. LCARS © CBS Studios Inc.

pwfuzz-rs. Rust-based password mutator for brute force attacks

hacker-strategies. Oblique Strategies for Hackers

webshell-entropy. Demonstrating the value of entropy as a detection mechanism for obfuscated webshells.

entropyscan-rs. Rust-based file entropy scanner for threat hunting

hacksummer-21. Repo for the 2021 edition of HackSummer

bluebpf. C

shell-setup. Repo for automating shell config on new machines

xllrs. XLL Creation with Rust PoC

corrodedshadow. Rust PoC for enumerating/deleting Volume Shadow Copies

jupyter-pcap. Packet capture analysis in Jupyter

wg-lighthouse-generator. Wireguard Lighthouse Configuration Generator

nimbuster. Directory brute-forcer written in Nim. Because we neede danother one.

python-cs. Computer Science lessons using Python

gitclass. Simple tools for managing student repos

hs21-files. Scripts/tests for HackSummer 21

zap-automation. Automating web app scanning in OWASP ZAProxy

rustdll32. Rust

schoolcast. Digital signage generator for schools

periscope. Curriculum Mapping for independent schools based on Understanding by Design

hsquiz. Framework for quizzes in HackSummer VMs

KrbRelayUp. KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

evildn. JavaScript

Freeze.rs. Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST

joyofhaskell. Exercise solutions for the book _The Joy of Haskell_