Lists (3)
Stars
Protect against malicious code installed via npm, yarn, pnpm, npx, pnpx, pip, uv and poetry with Aikido Safe Chain. Free to use, no tokens required.
Scan VS Code extensions, npm/PyPI packages, and local git repositories for GlassWorm supply chain attack indicators. Glassworm-hunter detects invisible Unicode payloads, decoder patterns, C2 marker…
A complete Go port of Impacket - 63 CLI tools and 24 libraries for Windows & Active Directory protocol attacks, compiled to a single dependency-free binary.
Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
DFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with AI Artifacts, AI Secret Hunt, process inspection, lateral movement tracking, persist…
Just A list Of Some Multilingual XSS Payloads and other weird ones i made
These are the slide decks and source code for Brute Ratel Seminar conducted on 24th August 2023. The youtube video for the seminar can be found here:
AI Red Teaming playground labs to run AI Red Teaming trainings including infrastructure.
Collection of Notes and CheatSheets used for Red teaming Certs
Certified Red Team Operator (CRTO) Cheatsheet and Checklist
Damn Vulnerable MCP Server
peeko – Browser-based XSS C2 for stealthy internal network exploration via infected browser.
collection of articles about PhD life written in 🇯🇵
Remove AV/EDR Kernel ObRegisterCallbacks、CmRegisterCallback、MiniFilter Callback、PsSetCreateProcessNotifyRoutine Callback、PsSetCreateThreadNotifyRoutine Callback、PsSetLoadImageNotifyRoutine Callback...
Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.
Identifies the bytes that Microsoft Defender flags on.