th3xace Goto Github PK
Name: David B.
Type: User
Company: @Team B3aT
Bio: Red Team Operator | Purple Team | OSCP | CRTP | CRTO | GPEN | GCIH | CREST CPSA-CRT | CISSP | ISO27001 LA | Next...
Twitter: TH3xACE
Location: Somewhere on earth
Name: David B.
Type: User
Company: @Team B3aT
Bio: Red Team Operator | Purple Team | OSCP | CRTP | CRTO | GPEN | GCIH | CREST CPSA-CRT | CISSP | ISO27001 LA | Next...
Twitter: TH3xACE
Location: Somewhere on earth
Identifies the bytes that Microsoft Defender flags on.
A very simple lab to demo some Terraform, DSC, Inspec and Gitlab CI
This project is a meta package, it will install all other Dissect modules with the right combination of versions.
Dumping DPAPI credz remotely
Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters
Domain Password Audit Tool for Pentesters
Yet another LSASS dumper
Automating EDR Testing with reference to MITRE ATTACK via Cobalt Strike [Purple Team].
Scan installed EDRs and AVs on Windows
An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈
A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.
Exegol is a fully featured and community-driven hacking environment
Fast web fuzzer written in Go
Browser's XSS Filter Bypass Cheat Sheet
The iconic SVG, font, and CSS toolkit
This script was developped to assist in SpearPhishing campaign during Red Team operations. It can be used to generate random name based on country of origin, sex and how common the combination of surname and firstname can be.
🕵️♂️ Investigate Google Accounts with emails.
🐙 Track down GitHub users.
Find vulnerabilities in AD Group Policy
PIC lsass dumper using cloned handles
The Hunting ELK
ransomware open-sources
httpx is a fast and multi-purpose HTTP toolkit allows to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads.
A reader that gets text from different file formats through the IFilter interface
My small collection of cyber security ebooks
InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditional fork and run execute-assembly module
Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS
These are the labs for my Intro class. Yes, this is public. Yes, this is intentional.
A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.