jtomkiel

jtomkiel's Stars

• kubescape/kubescape

  Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

  Language:Go10.3k99495840

• dnSpyEx/dnSpy

  Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

  Language:C#7.2k140252476

• RoganDawes/P4wnP1_aloa

  P4wnP1 A.L.O.A. by MaMe82 is a framework which turns a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming and physical engagements ... or into "A Little Offensive Appliance".

  Language:JavaScript3.8k197332519

• ekzhang/rustpad

  Efficient and minimal collaborative code editor, self-hosted, no database required

  Language:Rust3.6k3057152

• SnaffCon/Snaffler

  a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

  Language:C#2.2k2660221

• elliotchance/c2go

  ⚖️ A tool for transpiling C to Go.

  Language:Go2.1k51500159

• topotam/PetitPotam

  PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

  Language:C1.9k276288

• sysdream/ligolo

  Reverse Tunneling made easy for pentesters, by pentesters https://sysdream.com/

  Language:Go1.7k3710223

• GhostPack/Certify

  Active Directory certificate abuse.

  Language:C#1.6k2928219

• Yaxser/Backstab

  A tool to kill antimalware protected processes

  Language:C1.4k2710241

• facebook/mariana-trench

  A security focused static analysis tool for Android and Java applications.

  Language:C++1.1k3595138

• med0x2e/SigFlip

  SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

  Language:C#1.1k2011193

• cfalta/MicrosoftWontFixList

  A list of vulnerabilities or design flaws that Microsoft does not intend to fix. Since the number is growing, I decided to make a list. This list covers only vulnerabilities that came up in July 2021 (and SpoolSample ;-))

  939624100

• tanc7/EXOCET-AV-Evasion

  EXOCET - AV-evading, undetectable, payload delivery tool

  Language:Go838207144

• pwnesia/dnstake

  DNSTake — A fast tool to check missing hosted DNS zones that can lead to subdomain takeover

  Language:Go83611668

• bats3c/ADCSPwn

  A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

  Language:C#818164125

• dirkjanm/PKINITtools

  Tools for Kerberos PKINIT and relaying to AD CS

  Language:Python6626981

• knight0x07/ImpulsiveDLLHijack

  C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be weaponized during Red Team Operations to evade EDR's.

  Language:C#501115100

• boku7/spawn

  Cobalt Strike BOF that spawns a sacrificial process, injects it with shellcode, and executes payload. Built to evade EDR/UserLand hooks by spawning sacrificial process with Arbitrary Code Guard (ACG), BlockDll, and PPID spoofing.

  Language:C44413070

• nettitude/RunPE

  C# Reflective loader for unmanaged binaries.

  Language:C#422111564

• APTortellini/unDefender

  Killing your preferred antimalware by abusing native symbolic links and NT paths.

  Language:C++35311079

• RiccardoAncarani/LiquidSnake

  LiquidSnake is a tool that allows operators to perform fileless lateral movement using WMI Event Subscriptions and GadgetToJScript

  Language:C#3277146

• improsec/ImproHound

  Identify the attack paths in BloodHound breaking your AD tiering

  Language:C#3126335

• zer1t0/certi

  ADCS abuser

  Language:Python2654430

• wdahlenburg/interactsh-collaborator

  Burpsuite plugin for Interact.sh

  Language:Java19971629

• xforcered/WFH

  Language:Python1841023

• mobdk/Upsilon

  Upsilon execute shellcode with syscalls - no API like NtProtectVirtualMemory is used

  Language:C#922020

• DarkCoderSc/inno-shellcode-example

  Run shellcode through InnoSetup code engine.

  Language:Inno Setup677112

• Flangvik/ADCSPwn

  A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

  Language:C#41104

• PortSwigger/hackbar

  HackBar plugin for Burpsuite

  Language:Java25206