Tijme Gommers

dittobytes. Metamorphic cross-compilation of C++ & C-code to PIC, BOF & EXE.

angularjs-csti-scanner. Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.

cmstplua-uac-bypass. Cobalt Strike Beacon Object File for bypassing UAC via the CMSTPLUA COM interface.

amd-ryzen-master-driver-v17-exploit. Cobalt Strike (CS) Beacon Object File (BOF) for kernel exploitation using AMD's Ryzen Master Driver (version 17).

not-your-average-web-crawler. A web crawler (for bug hunting) that gathers more than you can imagine.

relocatable. Boilerplate to develop raw and truly Position Independent Code (PIC).

kernel-mii. Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.

nimplant-beacon-position-independent-c-code. A truly Position Independent Code (PIC) NimPlant C2 beacon written in C, without reflective loading.

kong-loader. Using Just In Time (JIT) instruction decryption, this shellcode loader ensures that only the currently executing instruction is visible in memory.

similar-request-excluder. A Burp Suite extension that automatically marks similar requests as 'out-of-scope'.

conferences. Some of the presentations, workshops, and labs I gave at public conferences.

reverse-engineering. This repository contains some of the executables that I've cracked.

binaries. A mirror of several precompiled standalone red-teaming tools.

latex-boilerplate-paper. A simple yet comprehensive LaTeX paper boilerplate (example) for academic homework.

blackout-reloaded. Cobalt Strike BOF to kill any anti-malware protected process using a new signed vulnerable driver.

blog-v2. My blog about cyber security, hacking, software engineering and much more.

forked-evilginx3-phishlets. This repository provides penetration testers and red teams with an extensive collection of dynamic phishing templates designed specifically for use with Evilginx3.

latex-boilerplate-presentation. A simple yet comprehensive LaTeX presentation boilerplate (example) for giving killer presentations.

blog-v1. My blog about cyber security, hacking, software engineering and much more.

grand-theft-filezilla. A tiny cross-platform Python script that steals saved & cached FileZilla credentials.

forked-sharphose. Asynchronous Password Spraying Tool in C# for Windows Environments

ivanti-cve-2023-35080-privilege-escalation-bof. Ivanti Secure Access (previously Pulse Secure) privilege escalation Cobalt Strike BOF (CVE-2023-35080).

forked-donut. Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

forked-sprayad. A Cobalt Strike tool to audit Active Directory user accounts for weak, well known or easy guessable passwords.

forked-lofl. Living Off the Foreign Land setup scripts

cxx-boilerplate. A simple yet comprehensive cross-platform c++ boilerplate to jumpstart your project.

forked-chrome-decrypter. Python script to decrypt saved Chrome usernames and passwords on windows

aptlib.h. A standard c-code library (`aptlib.h`) for Windows exploit & malware development.

forked-pink-panther. Windows x64 handcrafted token stealing kernel-mode shellcode

forked-pillow. The friendly PIL fork (Python Imaging Library)

forked-seatbelt. Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

forked-certify. Active Directory certificate abuse.