thomasxm

25519

United Kingdom

Pinned Repositories

Akira-obfuscator
Another LLVM-obfuscator based on LLVM-17. A fork of Arkari
65 2 010
BOAZ
A Multilayered AV/EDR Evasion Framework and AV Testing Tool.
7 1 01
BOAZ_beta
Multilayered AV/EDR Evasion Framework
Language:C++326 12 670
Checklists
Red Teaming & Pentesting checklists for various engagements
2 1 00
Clefia_cipher_python_implementation_for_general_testing
Comparison tests on lightweight Clefia cipher proposed by SONY
Language:Python2 2 01
CNN-Dog-Human-detection-and-dogbreed-classification
In this project I will build a convolutional network that could detect human and dog images, and then detect and resembling the breeds of dog. User supplied images are allowed.
Language:Jupyter Notebook4 2 01
codasm
Payload encoding utility to effectively lower payload entropy.
Language:Python2 0 00
explainshell
match command-line arguments to their help text
Language:Python0 1 00
GTFOBins.github.io
GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems
Language:HTML1 1 00
stanford-cs-229-machine-learning
VIP cheatsheets for Stanford's CS 229 Machine Learning
3 1 00

thomasxm's Repositories

thomasxm/gocheck
DefenderCheck but blazingly fast™
Language:Go2 0 0
thomasxm/amber
Reflective PE packer.
Language:Go1 0 0
thomasxm/AV-Parser
By using the custom AV parser script, we were able to streamline the VT results to AVClass and return the voted labels.
Language:Python1 1 0
thomasxm/DarkWidow
Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird + Spawns a sacrificial Process as target process + (ACG+BlockDll) mitigation policy on spawned process + PPID spoofing + Api resolving from TIB + API hashing
Language:C1 0 0
thomasxm/ldrgen
Template-based generation of shellcode loaders
Language:C1 0 0
thomasxm/LdrLockLiberator
For when DLLMain is the only way
Language:C1 0 0
thomasxm/MutationGate
Use hardware breakpoint to dynamically change SSN in run-time
Language:C++1 0 0
thomasxm/ROP_ROCKET
ROP ROCKET is an advanced code-reuse attack framework, with extensive ROP chain generation capabilities, including for novel Windows Syscalls attack, a novel Heaven's Gate, and "shellcodeless" ROP. The framework utilizes emulation and obfuscation to help expand the attack surface.
Language:Python1 0 0
thomasxm/APOLLO
Apple Pattern of Life Lazy Output'er
Language:Python0 0
thomasxm/asmjit
Low-latency machine code generation
Language:C++0 0
thomasxm/awesome-censys-queries
A collection of fascinating and bizarre Censys Search Queries
0 0
thomasxm/blackdagger
Blackdagger is a DAG-based automation tool specifically used in DevOps, DevSecOps, MLOps, MLSecOps, and Continuous Red Teaming (CART).
Language:Go0 0
thomasxm/CodeHawk-Binary
CodeHawk Binary Analyzer for malware analysis and general reverse engineering
Language:Python0 0
thomasxm/emba
EMBA - The firmware security analyzer
Language:Shell0 0
thomasxm/HardeningMeter
HardeningMeter is an open-source Python tool carefully designed to comprehensively assess the security hardening of binaries and systems.
Language:Python0 0
thomasxm/Havoc
The Havoc Framework.
Language:Go0 0
thomasxm/ImmoralFiber
Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) PhantomThread (An evolved callstack-masking implementation)
Language:C++0 0
thomasxm/lightgrep
Command-line utility for multipattern search using liblightgrep
Language:C++0 0
thomasxm/linux-pe
COFF and Portable Executable format described using standard C++ with no dependencies.
thomasxm/miasm
Reverse engineering framework in Python
Language:Python0 0
thomasxm/pe_tools
A cross-platform Python toolkit for parsing/writing PE files.
Language:Python0 0
thomasxm/reverser_ai
Provides automated reverse engineering assistance through the use of local large language models (LLMs) on consumer hardware.
thomasxm/rp
rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries.
Language:C++0 0
thomasxm/rp-bf.rs
fork: rp-bf: A library to bruteforce ROP gadgets by emulating a Windows user-mode crash-dump
Language:Rust0 0
thomasxm/TangledWinExec
PoCs and tools for investigation of Windows process execution techniques
Language:C#0 0
thomasxm/Windows-Internals
Important notes and topics on my journey towards mastering Windows Internals
Language:C++0 0
thomasxm/Winton
Command and Control (C2) framework
Language:Go0 0
thomasxm/wtf
wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-mode (experimental!).
Language:C++0 0
thomasxm/x64dbg
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
Language:C++0 0
thomasxm/zsteg
detect stegano-hidden data in PNG & BMP
Language:Ruby0 0