Starred repositories
First publicly shared exploit implementation for CVE-2026-33439 (OpenAM pre-auth RCE via jato.clientSession deserialization).
Training-free language model modification: Remove censorship, suppress slop, reduce sycophancy, and more
A curated list of hardware-oriented CTF challenges.
Repository for various Beacon Object Files (BOFs)
Reverse engineer anything with agents, from app behavior down to native binaries.
Implements harmful/harmless refusal removal using pure HF Transformers
Skills and generators for agents converting Rails applications to compatible Rust applications.
Offensive security and Penetration Testing TTP for Cloud based environment (AWS / Azure / GCP)
Advanced rhythm game for Windows, Linux and OS X. Designed for both home and arcade use.
Homebrew tap for moria (firmware identification/extraction) and mithril (firmware content analysis)
Sleep replacement that executes real, varied work to break behavioral pattern matching by EDR and anti-cheat systems
Static binary analysis with Detect It Easy — 100% in your browser, no uploads.
Windows Kernel-Mode Shellcode Development Framework (WKMSDF)
A desktop operator console for Sliver C2, built with Wails. Provides a native, lightweight GUI interface for Sliver by directly interfacing with its gRPC service no proxies or protocol reimplementa…
truffleproc — hunt secrets in process memory (TruffleHog & gdb mashup)
Tool to extract Kerberos tickets from Linux kernel keys.
A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats. Supports: ZIP, 7zip, PDF, ISO, IMG, CAB, VHD, VHDX
Collection of Beacon Object Files (BOF) for Cobalt Strike
Collection of Cyber Threat Intelligence sources from the deep and dark web
Showcase your skills on your Github readme or resumé with ease ✨
Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)
Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.