Discover @tothi Open Source projects

@tothi

tothi

Stars
2,501
Global Rank 12,069 (Top 0.5 %)
Followers 522
Following 157
Registered almost 11 years ago
Most used languages

Python
46.9 %

Shell
12.5 %

Java
9.4 %

C
9.4 %

HTML
6.3 %

C++
3.1 %

Perl
3.1 %

C#
3.1 %

PHP
3.1 %

JavaScript
3.1 %

rbcd-attack

Kerberos Resource-Based Constrained Delegation Attack from Outside using Impacket

dll-hijack-by-proxying

Exploiting DLL Hijacking by DLL Proxying Super Easily

pwn-hisilicon-dvr

ad-honeypot-autodeploy

Deploy a small, intentionally insecure, vulnerable Windows Domain for RDP Honeypot fully automatically.

serviceDetector

Detect whether a service is installed (blindly) and/or running (if exposing named pipes) on a remote machine without using local admin privileges.

usbgadget-tool

Dumb USB HID gadget creator for Android (for triggering device driver install on Windows for LPE)

stager_libpeconv

A basic meterpreter protocol stager using the libpeconv library by hasherezade for reflective loading

hs-dvr-telnet

open telnet port on modern HiSilicon devices

log4shell-vulnerable-app

A Basic Java Application Vulnerable to the Log4Shell RCE

ctfs

some example ctf writeups

azure-function-proxy

basic proxy as an azure function serverless app

smtp2slack4qnap

Compact SMTP to HTTP Gateway (targeting Slack for QNAP-NAS notifications)

kali-rpi-luks-crypt

Full disk encryption for Kali on Raspberry using LUKS

malicious-service

Minimal Windows Service Template for demonstrating privilege escalation via weak service executable permissions

malicious-hisilicon-scripts

Materials from my older (2018) HiSilicon research

linkedin-auth-bypass

browse linkedin profiles without a registered account

SharpShot

Trivial .NET desktop capturing for Red Team operations

Bundesnachrichtendienst

reversing / malware analysis recruitment challenge for German Federal Intelligence

gcstar-win32

standalone executable built from GCstar Perl release

issuu-dl

download pdf from issuu.com

remotethermo

remotethermo.com API test

lineageos-bullhead-build

Unofficial LineageOS builds for Google Nexus 5X "bullhead" devices

oauth-mitmproxy

oauth refresh_token client in mitmproxy

nmap-http-screenshot

take screenshots of http services from an nmap xml output

railfence

a simple python implementation of the Rail Fence cipher (with offset support)

sencor-bluetooth

Sample development Python scripts for reading data from the Sencor SWS 500 Outdoor Thermo/Humidity Meter Bluetooth LE device.

riemann-nonconvex

Simulation of a totally asymmetric attractive interacting particle system

burp-Base64PostRequest

Burp Extension: Base64 decode / encode POST request data

icinga2-plugins

customized plugins for icinga2

CryptoExamples

Crypto Examples for Java

prosmart-mqtt

Minimal proSmart - MQTT Gateway

malware-agenttesla

Brief Malware Analysis of an Agent Tesla variant

ringzer0team

https://ringzer0team.com

pyevtx-helpers

Some useful parsers for Windows EventLog (evtx) files using pyevtx

php-mailinglist

php interface to mailing lists through web interface (e.q. ezmlm, qmailadmin)

azure-function-proxy-ng

Azure Function as a Reverse Proxy (e.g. for C2 ;) )