Leo Pitt

Mystikal. macOS Initial Access Payload Generator

PersistentJXA. Collection of macOS persistence methods and miscellaneous tools in JXA

Go4aRun. Shellcode runner in GO that incorporates shellcode encryption, remote process injection, block dlls, and spoofed parent process

security. Notes and Commands for CTFs

Dylib-Hijack-Scanner. JavaScript for Automation (JXA) version of Patrick Wardle's tool that searches applications for dylib hijacking opportunities

InSync. Finder Plugin Persistence

InjectCheck. Swift

Custom_URL_Scheme. Tool to create a template to abuse Custom URL Schemes

LaunchAgentPersistence. Persistence using Launch Agents for OSX in JXA

VBA-SystemInfo. VBA Macro to gather system networking info

ctf. Script for CTF events

windows-privesc-check. Automatically exported from code.google.com/p/windows-privesc-check

CVE-2019-8656. CVE-2019-8656 GateKeeper Bypass

docker-elk. The Elastic stack (ELK) powered by Docker and Compose.

HELK. The Hunting ELK

macos-loginitems. A library to parse macOS LoginItems

apfell. JavaScript for Automation (JXA) macOS agent

Mythic. A collaborative, multi-platform, red teaming framework

hermes. Swift 5 macOS agent

Mount. Default VMware mount script

MacOSX-SDKs. A collection of SDK folders

thanatos. Mythic C2 agent targeting Linux and Windows hosts written in Rust

Misc-Powershell-Scripts. Random Tools

Reconnoitre. A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing. Included virtual host scanner.

struts-pwn. An exploit for Apache Struts CVE-2017-5638

simplefirefoxloop. This bash script takes a a list of IPs and opens them in firefox for you to save time copy and pasting