


Automates incident response tasks via Carbon Black Response API: file/registry deletion, process killing, sensor isolation, binary collection, and…

Detection Script for MongoBleed Exploitation

Brute-force tool that recovers full executable paths from Windows prefetch hashes using bodyfiles, supporting XP, Vista, and 2008 hash functions for…

Offset Independent Credential Extraction Tool

A swiss-knife MCP server for analysing PCAP files

Cisco IOS XE implant scanning & detection (CVE-2023-20198, CVE-2023-20273)

KeePass 2.X dumper (CVE-2023-32784)

Defensive PoC decoy for CVE-2025-59287 (WSUS) - emulates WSUS endpoints, captures request bodies and metadata, saves evidence for forensic analysis,…

Python script for carving Bitlocker VMK keys

Information on the Windows Spooler vulnerability - CVE-2021-1675; CVE 2021 34527

An OSINT investigation case mapping tool for organizing entities, relationships, evidence, and intelligence.

Blackout — The Official Blackout Public FAFO Repo.

-- FOR EDUCATIONAL USE ONLY -- Proof-of-Concept RCE for CVE-2022-1388, plus some added functionality for blue and red teams

HTB OneTwoSeven full walkthrough: deterministic creds, chroot symlink escape, rewrite-rule bypass RCE, CVE-2024-1086 to root

Claude Code skill to scan machines for Mini Shai-Hulud (CVE-2026-45321) supply chain worm IOCs

TryHackMe SOC Level 1 — Follina CVE-2022-30190, Nim C2, Chisel, PrintSpoofer, backdoor accounts

This Python application scans for the CVE-2023-38831 vulnerability in WinRAR.