Research And Tools

Projects

AI-assisted lab skills, native security tooling, stream and relay utilities, WinRM and Active Directory research, network scanners, tunneling projects, web security utilities, and operator workflow experiments.

Latest

hackthebox-skills

Safety-first skill pack for authorized Hack The Box and comparable lab workflows with Claude and Codex.

AIHack The BoxClaude/Codex

wirecat

Native C stream and session utility for TCP, UDP, SCTP, Unix sockets, VSOCK, TLS/mTLS, QUIC, relays, proxies, PTY sessions, brokers, and file transfer.

CNetworkingTLS/QUIC

nimux

Single-binary Nim toolkit for network enumeration, Active Directory operations, and remote execution.

NimNetwork enumerationRemote execution

liquid-glass

GTK3 terminal emulator with a liquid glass aesthetic for Linux.

CGTK3Terminal

xpath

Fast multi-technique XPath injection scanner written in Nim for detection and extraction workflows.

NimXPath injectionScanner

nim-winrm

Native WinRM client library for Nim with NTLM, Kerberos, PowerShell, PSRP, and WSMAN focus.

NimWinRMPSRP

nimrm

Native Nim WinRM shell with NTLM, Kerberos, file transfer, in-memory helpers, and AD/OPSEC reporting.

NimWinRMKerberos

rosemary

Cross-platform transparent network tunneling over QUIC. No TUN/TAP, proxychains, or proxy settings required.

GoTunnelingPivoting

sqlwinds

SQL Server security assessment and post-exploitation toolkit.

C#MSSQLPost-exploitation

dotx

Hunter for exposed dotfiles and misconfigured secrets.

GoDotfilesSecrets

cothon

Stealthy command and control framework designed for ethical penetration testing and red team operations.

PythonC2Red team

Mago

JavaFX shell generator for Linux, Windows, and web payloads with Base64 and URL encoding support.

JavaJavaFXPayloads

windows-linux-php-reverse-shell

PHP reverse shell for Windows and Linux targets with OS selection through a query parameter.

PHPReverse shellWindows/Linux

Silk

Secure single-file PHP shoutbox with AES-256 encrypted storage, no setup, and no logs.

PHPAES-256Privacy

av-bypass

Windows reverse shell antivirus bypass research repository.

C#AV bypassWindows

Vocal-xss

Proof-of-concept research for voice-based cross-site scripting paths in web applications.

JavaScriptXSSVoice input

Kuara

C++ webshell designed for Windows systems with web-accessible command execution.

C++WindowsWebshell

Flora

Lightweight command-line tool for discovering subdomains and takeover vulnerabilities.

ShellSubdomainsTakeover

Clover

P2P reverse shell for decentralized peer-to-peer command execution between two computers.

PythonP2PC2

panzer

ProxyFinder command-line tool for collecting public proxies from multiple sources.

ShellProxyProxy checker

Arescan

Web directory discovery tool for uncovering hidden directories and links using breadth-first search.

PythonWeb scannerDiscovery