Code

My profile on GitHub

• Zout - A pure Servlet bindshell
• archeck - Archive Verifier
• asciiize - asciiize is a simple Python module which replaces characters of various non-ascii encodings in strings with their nearest ASCII substitute.
• audpl2dir - Export tracks in Audacious playlists as files in a directory
• cmdrun - Classes to execute a new process producing line-oriented output (like an ordinary shell command) in a deadlock-proof manner.
• dotobj - Turn key/value pairs with separators in key names into nested objects (and back again)
• dracscan - DRAC Information Gatherer
• edgepwutil - edgepwutil can be used to generate or reverse password hashes used in config files of Checkpoint Edge firewalls firmware versions 8.0.39 and earlier (see README for specific tested versions).
• groceryrun - Grocery List / Inventory App for Android
• hdslfilter - Filtering language for filtering Python datastructures
• impacket - Impacket is a collection of Python classes for working with network protocols.
• infosecdocs - Misc infosec writing (see below)
• iptree - Python classes for representing IPv4 addresses and netmasks, particularly in tree structures organized by CIDR hierarchy
• netscaler_cookie_decoder - Decode NetScaler NSC_* cookies and extract back-end web server address & port
• nmine - nmine searches files for substrings that appear to be valid DNS names. It resolves them and outputs the result if the address it resolves to is of interest.
• nmurl - nmurl searches nmap output and DNS data to produce HTTP[S] URLs (including vhosts).
• octo - octo is a Javascript based pattern drafting system. Code specifies the location in physical units of shapes like lines and curves.
• proxyscan - Performs a portscan via a HTTP proxy
• swaf - Steve's Web (Anti|Application) Framework
• xedarg - xedarg is a Javascript utilty for functions that take discrete named arguments.
• xeobjutil - A collection of miscellaneous utility functions for manipulating objects.
• xnse - A repository for my nmap NSE scripts

Articles

• Anti Virus Evasion with Encrypted Payloads
• Bypassing CSP with JSONP Endpoints
• DNS-based Java Deserialization Vulnerability Probe
• Exploiting CVE-2019-2729 WebLogic Deserialization Vulnerability
• Exploiting CVE-2022-36923 ManageEngine OpManager API Auth Bypass
• Extracting Sensitive Info from Insecure MFDs
• Making Windows Passwords Stealable
• Making node-fetch Work with a TLS Intercept Proxy
• Modifying Android Apps to Allow TLS Intercept with User CAs
• PAM pam_access Origin Restriction Bypass
• bash Function to Generate Nmap -p Value