stephenbradshaw

Offensive Security professional

Australia

Pinned Repositories

ad_ldap_dumper
Security focused tool for dumping information from Active Directory via LDAP
Language:Python8 2 02
aws_url_signer
POC tool to create signed AWS API GET requests to bypass Guard Duty alerting of off-instance credential use via SSRF
Language:Python58 3 15
breakableflask
Simple vulnearable Flask web application
Language:Python27 3 220
CVE-2022-46164-poc
Basic POC exploit for CVE-2022-46164
Language:Python11 2 02
hlextend
Pure Python hash length extension module
Language:Python117 4 625
pentesting_stuff
A place to store my various pentesting related code thats too small/niche to justify its own repository, and a simple website with notes on pentesting.
Language:Python30 4 010
shellcode
Various shell code I have written
Language:Assembly16 4 012
ssltest
SSL/TLS cipher testing tool
Language:Perl8 2 00
vulnserver
Vulnerable server used for learning software exploitation
Language:C964 30 3257

stephenbradshaw's Repositories

stephenbradshaw/vulnserver
Vulnerable server used for learning software exploitation
Language:C964 30 3257
stephenbradshaw/hlextend
Pure Python hash length extension module
Language:Python117 4 625
stephenbradshaw/aws_url_signer
POC tool to create signed AWS API GET requests to bypass Guard Duty alerting of off-instance credential use via SSRF
Language:Python58 3 15
stephenbradshaw/pentesting_stuff
A place to store my various pentesting related code thats too small/niche to justify its own repository, and a simple website with notes on pentesting.
Language:Python30 4 010
stephenbradshaw/breakableflask
Simple vulnearable Flask web application
Language:Python27 3 220
stephenbradshaw/shellcode
Various shell code I have written
Language:Assembly16 4 012
stephenbradshaw/CVE-2022-46164-poc
Basic POC exploit for CVE-2022-46164
Language:Python11 2 02
stephenbradshaw/ad_ldap_dumper
Security focused tool for dumping information from Active Directory via LDAP
Language:Python8 2 02
stephenbradshaw/ssltest
SSL/TLS cipher testing tool
Language:Perl8 2 00
stephenbradshaw/offsecfeed
RSS feed of offensive security topics http://thegreycorner.com/offsecfeed/
Language:HTML5 1 0
stephenbradshaw/BurpPythonGateway
Uses py4j to make Burp Extender internals available to Python code and interactive interpreters like iPython
Language:Python4 2 02
stephenbradshaw/detectionlab_mod
Files related to my own DetectionLab deployment process
Language:PowerShell4 1 0
stephenbradshaw/Red-Lambda
Leveraging AWS Lambda Function URLs for C2 Redirection
Language:Python4 0 01
stephenbradshaw/CSharpInjectorLibrary
Reference injectable DLL in C# that provides a number of example methods for reproducing various TTPs
Language:C#3 1 01
stephenbradshaw/sliver
Adversary Emulation Framework
Language:Go3 0 0
stephenbradshaw/stephenbradshaw
Github profile repository
3 2 0
stephenbradshaw/stephenbradshaw.github.io
Website
Language:HTML3 3 1
stephenbradshaw/DonPAPI
Dumping DPAPI credz remotely
Language:Python2 0 01
stephenbradshaw/GOAD
game of active directory - libvirt compatible fork
Language:PowerShell2 0 0
stephenbradshaw/keyctl
A Go-lang interface to the linux kernel keyring api
Language:Go2 0 0
stephenbradshaw/OffensivePipeline
OffensivePipeline allows to download, compile (without Visual Studio) and obfuscate C# tools for Red Team exercises.
Language:C#2 1 01
stephenbradshaw/poseidon
Poseidon is a Golang agent targeting Linux and macOS
Language:Go2 0 0
stephenbradshaw/charlotte
c++ fully undetected shellcode launcher ;)
Language:Python1 1 02
stephenbradshaw/hydeout
A refreshed version of Hyde for Jekyll 3.x and 4.x
Language:HTML1 1 0
stephenbradshaw/impacket
Impacket is a collection of Python classes for working with network protocols.
Language:Python1 2 0
stephenbradshaw/inject
Minimal DLL-injection tool.
Language:C1 1 01
stephenbradshaw/python-paddingoracle
A portable, padding oracle exploit API
Language:Python1 2 0
stephenbradshaw/Security-Research
Exploits written by the Rhino Security Labs team
Language:Python1 1 0
stephenbradshaw/evilginx2
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
stephenbradshaw/ysoserial
forked from wh1t3p1g/ysoserial (added payloads) and fixes/notes for compiling
Language:Java