Marcello

Orchestrate fleets of Claude Code & Claude Computer Use agents across containers, VMs, and physical devices. Live desktop streaming, intelligent task delegation, and multi-channel human-in-the-loop gateway. Schedule tasks with self-healing and self-learning.

My experiments in weaponizing Nim (https://nim-lang.org/)

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

Python interpreter for Cobalt Strike Malleable C2 Profiles. Allows you to parse, build and modify them programmatically.

DNSChef (NG) - DNS proxy for Penetration Testers and Malware Analysts

Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient

A swiss army knife for pentesting networks

An archived Python toolkit for security professionals to test Windows networks and Active Directory environments, no longer maintained by the original author, with active development moved to a community fork.

Framework for Man-In-The-Middle attacks

Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.

A PoC backdoor that uses Gmail as a C&C server

A PrintNightmare (CVE-2021-34527) Python Scanner. Scan entire subnets for hosts vulnerable to the PrintNightmare RCE

Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.

Modified version of the passing-the-hash tool collection made to work straight out of the box

Toolbox containing research notes & PoC code for weaponizing .NET's DLR

Automate creating resilient, disposable, secure and agile infrastructure for Red Teams

Spoof emails from any of the +2 Million domains using MailChannels (DEFCON 31 Talk)

Python script to decrypt saved Chrome usernames and passwords on windows

Python clone of arpspoof that can poison hosts via arp-requests as well as arp-replies

A mirror of the original SSLstrip+ code by Leonardo Nve

DLL sideloading/proxying with Nim!

A collection of Ansible Playbooks that configure Kali to use Fish & install a number of tools

Converts a USB Rubber ducky script into a Kali Nethunter friendly format for the HID attack

Slides from various talks that I've given over the years

Spoofs a DHCP server and exploits all clients vulnerable to the 'ShellShock' bug

Cobalt Strike BOF Files with Nim!

Python library that facilitates interfacing with BeEF via it's RESTful API

Generate graphs with NetworkX, natively visualize with D3.js and pywebview

A C# stager for SILENTTRINITY (https://github.com/byt3bl33d3r/SILENTTRINITY)

Loads the AutoIt DLL and PowerShell assemblies into memory and executes the specified keystrokes

Automatically get internetz from access points that have MAC based filtering enabled

A collection of modifed PowerShell Scripts for CrackMapExec (https://github.com/byt3bl33d3r/CrackMapExec)

Recursively searches a directory for any file containing a specified string

SMBMap is a handy SMB enumeration tool

A script that can see if an email address is valid in Office365 (user/email enumeration). This does not perform any login attempts, is unthrottled, and is incredibly useful for social engineering assessments to find which emails exist and which don't.

My Python Cookiecutter project template

Modern problems require modern solutions

Experiments with Google Gemini's Vision capabilities for LLM driven/aided web navigation and desktop manipulation

Converts a command to a base64 powershell compatible string

A cross-platform stager for SILENTTRINITY (https://github.com/byt3bl33d3r/SILENTTRINITY)

Prometheus Service Discovery for Tailscale (Python Edition)

An async Python client library for Empire's RESTful API

Downloads shellcode over HTTP and executes in memory. Now with threading! Rejoice!

A collection of awesome readme templates to display on your profile

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

Miscellaneous tools for BloodHound

PowerSploit - A PowerShell Post-Exploitation Framework

Empire is a PowerShell and Python 3.x post-exploitation framework.

Use a LLM to create the ultimate Leek AI for Leek Wars! 🥬

Optional plugins for MITMf

Exchange your privileges for Domain Admin privs by abusing Exchange

API and CLI tool to fetch and query Chome DevTools heap snapshots (Python & Playwright)

Github Profile Readme

Tmux configuration, that supercharges your tmux to build cozy and cool terminal environment

A pyobfuscate fork made specifically to randomize and obfuscate python based payloads

Automatically exported from code.google.com/p/hookme

Automatically exported from code.google.com/p/jamaal-re-tools

Active Directory information dumper via LDAP

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

Cobalt Strike BOF with Zig!

LDAP library for auditing MS AD

An 💦 orgasmic 💦 Python library for the Docker Engine API 🥵

Some useful scripts for CobaltStrike

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

Trying to take the dum-dum out of security

A collection of curated Java Deserialization Exploits

Python driver for Wappalyzer, a web application detection utility.

A loco version of BozoCrack with some improvements (https://github.com/juuso/BozoCrack)

Simple (relatively) things allowing you to dig a bit deeper than usual.

Original Sergio-Proxy code written by Ben Schmidt (@_supernothing)

An asynchronous proxy to proxy HTTP traffic through AWS API Gateway and rotate IP address on each request

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

Headless chrome/chromium automation library (unofficial port of puppeteer)

Powershell-based bot framework

Prometheus client that exposes your external IP address

Conky config for everyone who likes a lot of green

Nim's Windows API and COM Library

Python library for SPF, DKIM, and DMARC email protections.

Embed CPython in Nim or C#!

Cookiecutter template for a Python package.

No description.

Pure Nim implementation of deflate, zlib, gzip and zip.

Community curated list of templates for the nuclei engine to find security vulnerabilities.

An open-source, code-first Python toolkit for building, evaluating, and deploying sophisticated AI agents with flexibility and control.

Conky config for everyone who likes a lot of red

an OS agnostic UI module for Python

Embeds the Boolang Compiler and runs the generated in-memory assembly in a disposable AppDomain