James Forshaw

oleviewdotnet. A .net OLE/COM viewer and inspector to merge functionality of OleView and Test Container

DotNetToJScript. A tool to create a JScript file which loads a .NET v2 assembly from memory.

ExploitRemotingService. A tool to exploit .NET Remoting Services

WindowsRpcClients. This respository is a collection of C# class libraries which implement RPC clients for various versions of the Windows Operating System from 7 to Windows 10.

blackhat-usa-2022-demos. Demos for the Blackhat USA 2022 talk "Taking Kerberos to the Next Level"

windows-security-internals. A repository for additional files related to the book Windows Security Internals with PowerShell from No Starch Press.

windows-logical-eop-workshop. C

CANAPE.Core. A network proxy library written in C# for .NET Core based on CANAPE

infosec-presentations. A repository of previous info-sec presentations I've presented.

IE11SandboxEscapes. Some example source code for fixed IE11 sandbox escapes.

DeviceGuardBypasses. A repository of some of my Windows 10 Device Guard Bypasses

ExploitDotNetDCOM. A tool to exploit .NET DCOM for EoP and RCE. Is fixed in latest versions of the .NET.

WindowsRuntimeSecurityDemos. Demos for Presentation on Windows Runtime Security

DotNetInteropDemos. A set of demos and a PowerShell module to interact with DotNetInterop.

windows-attacksurface-workshop. Workshop material for a Windows Attack Surface Analysis Workshop

ZeroNights2017. Some sample code from my Zero Nights 2017 presentation.

ExampleChatApplication. A simple example chat application written for .NET Core to learn network protocol analysis.

windows-memory-access-traps. A few examples of how to trap virtual memory access on Windows.

canape. CANAPE Network Testing Tool

DumpReparsePoints. This is a simple tool to dump all the reparse points on an NTFS volume.

Zer0Con_2018. Repository for my talk on Desktop Bridge at Zer0Con 2018.

setsidmapping. Simple tool to use LsaManageSidNameMapping get LSA to add or remove SID to name mappings.

SuperFunkyChat. An example binary protocol application for learning CANAPE

44con_2014. Materials for 44con 2014 CANAPE Workshop

AxHell. A simple exploitable ActiveX control for RE/VR

bh2014. Built binaries for BH 2014 workshop

poc-gtfo-13-poc. This is the code to accompany the article "How Slow Can You Go?" from PoC||GTFO #13

canape-ssl-mitm-osx. A simple CANAPE extension to exploit iOS/OSX SSL vulnerability

pdbex. pdbex is a utility for reconstructing structures and unions from the PDB into compilable C headers

re. Some simple reverse engineering resources

saturndebug. My old old sega saturn debugger, for information purposes

Sourcey-Jack. Simple injection project to convert network connections to SOCKS

apple1_emu. A simple Apple I emulator written in Rust.

windbg_js_scripts. Toy scripts for playing with WinDbg JS API

prxtool. C

psplinkusb. C

Kanjidic-OSX. A project to convert Jim Breen's Kanji Dictionary to the OSX dictionary.app format