pazwant

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

bhg

Code samples for No Starch Press Black Hat Go

building-c2-implants-in-cpp

The source code files that accompany the short book "Building C2 Implants in C++: A Primer" by Steven Patterson (@shogunlab).

concourse

Concourse is a container-based continuous thing-doer written in Go and Elm.

CVEAutoMatcher

Metasploit plugin to parse Metasploit DB for CVE numbers and match these with existing exploit and aux modules.

docker_oneliners

Collection of docker oneliners to save time when compiling/running projects for security research & development.

etherpad-lite

Etherpad: A modern really-real-time collaborative document editor.

garble

Obfuscate Go builds

log4j2_rce

log4j2 rce、poc

MailSniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

pazwant/al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

pazwant/bhg

Code samples for No Starch Press Black Hat Go

pazwant/building-c2-implants-in-cpp

The source code files that accompany the short book "Building C2 Implants in C++: A Primer" by Steven Patterson (@shogunlab).

pazwant/concourse

Concourse is a container-based continuous thing-doer written in Go and Elm.

pazwant/CVEAutoMatcher

Metasploit plugin to parse Metasploit DB for CVE numbers and match these with existing exploit and aux modules.

pazwant/docker_oneliners

Collection of docker oneliners to save time when compiling/running projects for security research & development.

pazwant/etherpad-lite

Etherpad: A modern really-real-time collaborative document editor.

pazwant/garble

Obfuscate Go builds

pazwant/log4j2_rce

log4j2 rce、poc

pazwant/MailSniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

pazwant/memory-security

Tools for securely clearing and validating iOS application memory

pazwant/msspray

Password attacks and MFA validation against various endpoints in Azure and Office 365

pazwant/OffensiveNim

My experiments in weaponizing Nim (https://nim-lang.org/)

pazwant/PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pazwant/Pcode

Static Code Scanner

pazwant/rbac-police

Evaluate the RBAC permissions of Kubernetes identities through policies written in Rego

pazwant/scantron

A distributed nmap / masscan scanning framework complete with scan scheduling, engine pooling, subsequent scan port diff-ing, and an API client for automation workflows.

pazwant/ShadowRDP

pazwant/SourcePoint

SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.

pazwant/spoofcheck

Simple script that checks a domain for email protections

pazwant/squid

Squid Web Proxy Cache

pazwant/SysWhispers

AV/EDR evasion via direct system calls.