
SharpCollection
Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps…

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps…

Manages the core lifecycle of Qubes OS domains via a Python admin API, handling secure compartmentalization with Xen and exposing an event system for…

Obfuscates Go builds by wrapping the Go toolchain, replacing identifiers, package paths, and position data with hashes and stripping debug and build…

Core framework for identity and access management, providing authentication, authorization, and identity governance capabilities for enterprise…

Plausible Analytics master d44e104 - High - Remote - IDOR - PUT traffic-change-notification site_id mass assignment

Plausible Analytics master d44e104 - High - Remote - Privilege leftover - editor people HTML leaks transfer nanoid

Collecting & Hunting for IOCs with gusto and style

Master the art of cloud exploitation. A specialized resource for offensive security researchers and red teamers focused on weaponizing…

Security patch and proof-of-concept for GoBalance onion load balancer, covering master key recovery via blindedSign and forged descriptor acceptance,…

Drop any Windows DPAPI artifact and it identifies the format and the exact master key it needs, then decrypts once you supply the key. Offline, CLI +…

Network forensics writeup + tooling for a TryHackMe DFIR challenge: reverses a hex→Base64→XOR exfiltration chain from PCAP traffic, then recovers a…

Local-first encrypted password vault for Android with Master Password access, Recovery Key support, Autofill integration, and portable encrypted…

A repo to hold KQL queries as part of my 100 days of KQL effort.

A complete Android ImGui menu template project.

Security Advisory: Out-of-Bounds Read in facil.io MIME Parser leads to Server crash

Security advisory for CVE-2026-66731 with root cause analysis, PoC exploit, and fix suggestions for facil.io HTTP/1.1 chunked encoding parser bug.

Security Advisory: Infinite Loop DoS in facil.io MIME Parser (Partial Boundary)

Async BOF to capture KeePass master passwords by detecting and keylogging locked database windows.