Clik here to view.
HomeLab
GNS3 home lab documenting a segmented network with Cisco ASAv firewall, L3 core, DMZ, and an Active Directory domain for practicing networking, sysadmin, and offensive security.
View ArticleClik here to view.
jshound
Find every API request a web app makes, from the JavaScript it ships: method, URL, body, headers and GraphQL operations. One command.
View ArticleClik here to view.
OTinstaller
Installs, runs, updates, and removes open-source OSINT command line tools by name, with typed inputs, JSON output, and saved results for automated reconnaissance workflows.
View ArticleClik here to view.
CouchPotato
Windows privilege escalation tool that patches ETW and AMSI and uses indirect syscalls to abuse SeImpersonatePrivilege, escalating service accounts or admins to NT SYSTEM.
View ArticleClik here to view.
yowie
Finds the SaaS services an organisation subscribes to, using only externally observable data. Built for shadow IT discovery.
View ArticleClik here to view.
pvbrf-id
Simulation code and results for a private, verifiable, Byzantine-robust federated intrusion detection protocol using secret sharing, Merkle audits and Pedersen commitments.
View ArticleClik here to view.
AutoControl-Arena
Automated framework for frontier AI safety evaluation that synthesizes executable, pressure-rich test environments to uncover latent risks in advanced agent models.
View ArticleClik here to view.
defense-as-skill
Runtime guard skill that detects and blocks malicious skill-induced attacks in skill-augmented agents, with an MCTS loop that evolves the guard policy from rollout feedback.
View ArticleClik here to view.
Clik here to view.
Decepticon
Autonomous LLM red team agent that plans and executes full attack chains—recon, exploitation, privilege escalation, lateral movement and C2—inside an isolated Kali sandbox.
View ArticleClik here to view.
numbat
Visibility into AI agent activity on endpoints, with on-device detection, optional pre-action blocking, and forensic reconstruction.
View ArticleClik here to view.
AgentStalker
End-to-end security audit framework for LLM agents: static AST and taint modeling, attack synthesis, Docker sandbox replay, and deterministic verdict reporting with MCP auditing.
View ArticleClik here to view.
exoproc
Cross-process instrumentation for Windows x64 in TypeScript — hook functions, redirect threads, and read/write memory in another process, with no DLL injection and no CreateRemoteThread.
View ArticleClik here to view.
oORecon
Terminal UI for attack surface discovery: DNS recon, subdomain enumeration, port scanning, reverse IP, leaked login URLs, and JavaScript secret mining.
View ArticleClik here to view.
Clik here to view.
AnkOsint
Python-based OSINT tool that gathers and analyzes publicly available data from open sources to support threat intelligence, vulnerability research, and investigations.
View ArticleClik here to view.
Clik here to view.
Clik here to view.
scan4secrets
Find credentials and secret with 170+ rules covering across source code, Web URL, and CI/CD, verifies them against vendor APIs, and generates SARIF, JSONL, HTML, PDF, or Excel reports.
View ArticleClik here to view.
InjectSetConsole
Proof of Concept for Process Code Injection Without Using WriteProcessMemory
View Article
![[TVRIP] FX Senshi Kurumi-chan [FX戦士くるみちゃん] 第01-02話](http://animerss.com/img/TVRIP-FX-Senshi-Kurumi-chan.jpg)
