Zumi Yumi

Remote dynamic .NET obfuscator and AMSI/ETW patch tool for bypassing Defender

A Python tool that patches Windows security monitoring at runtime and generates an encrypted C# dropper that fetches and executes shellcode in memory, designed for offensive security testing.

This repository represents a proof-of-concept of successfully exfiltrating a user's TGT in a hardened Smart Card only Active Directory environment

Modified gettgt.py from PKINIT

Python loader to write a csharp AES reflectively loaded reverse shell.

Layered encrypted rundll32 applocker bypass tool for reverse shell

Custom RegAsm user level layered encrypted applocker bypass/AV bypass reverse shell

Class going over simple reverse engineering at a beginner's level. Some things might be a little wrong. Welcome to feedback

AutoRecon-OSWA is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

Coding Projects

Wrap some shellcode to dodge AV

Containing my notes, practice binaries + solutions, blog posts, etc. for the Offensive Security Exploit Developer (OSED/EXP-301)

The Red Sun vulnerability repository

This tool extracts certs and their private key if exportable from smart cards.

This repository presents a proof-of-concept of CVE-2024-50677

A semi-automated defense setup script for Window 2012 R2 to 2022 AD Servers

Config files for my GitHub profile.

Fake smartcard prompter

[CVPR 2024] Official PyTorch implementation of SuGaR: Surface-Aligned Gaussian Splatting for Efficient 3D Mesh Reconstruction and High-Quality Mesh Rendering

C++ Encrypted SSL/TLS REVERSE SHELL, designed to provide secure, encrypted communication between a compromised client and an attacker, while blending seamlessly into HTTP traffic.

some windows crap or something. I don't really know yet tbh.

No description.

This repository contains the solutions I have made for this years AdventOfCode Challenges

Lightweight Google-searchable Slack alternative for Communities

Hardening AD / Windows / Linux for Hivestorm 2024

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Powershell script to automate your windows hardening process based on CIS Benchmark