Alex Flores

doxycannon. A poorman's proxycannon and botnet, using docker, ovpn files, tor nodes, and dante socks5 proxies

passdb-frontend. Pivoting Frontend for Pre-Seeded Password Databases

letsproxy. Quickly fetch Let's Encrypt certs and serve a reverse proxy

passdb-backend. Password Breach API Server

gorsh. A toy CTF Golang Reverse Shell w/ a Tmux-driven psuedo-C2 Interface

hackthebox.vim. HackTheBox Vim Colorscheme

dummyDLL. Utility for hunting UAC bypasses or COM/DLL hijacks that alerts on the exported function that was consumed.

ino. In 'n Out - See what goes in and comes out of PEs

DoubleTap. Password spraying on sites that require 2+ page loads and dynamic nonces

sudophisher. A logging ASKPASS binary

bothan. Is this IP a C2 server?

holeysocks. Cross-Platform Reverse Socks Proxy in Go

davil. leaking net-ntlm with webdav

getsystem. Small utility package for manipulating Windows process tokens

vpn_access_point. Script from VPN AP blog post

xordump. Go

kh. Keyhack - Golang API token/webhook validator

msldapuac. A golang package for retrieving values from the Microsoft LDAP property, `UserAccountControl`

sql-trainer. Practice your SQL query-fu

dllexical. easy dll proxying in go

amnesia. Takes unallocated memory and fills it with junk to mess with forensics tools.

oscp_tools. A collection of scripts from around the web to be used with OSCP

printntlm. Creates a localhost webDAV server and authenticates to it, capturing the Net-NTLM hash

it-o. Hacky linux memory probe. Yara or Regex scan process memory

git-ls. List (or plunder) private repos/gists to which a token has access, including those of other users

bashynumb. Quick and Dirty Linux Enum Script from blog post -->

interview-log. A collection of interview questions and their answers

all-yar-secrets. Yara rules for finding secrets

xbox-api. An API wrapper for xboxapi.com

atreus-firmware. Firmware for the atreus keyboard

nx. a tmux-driven, reverse shell manager with an identity crisis

rpcls. List running processes that are acting as DCE/RPC servers or clients

go-ntlm. Go

exploit-database. The official Exploit Database repository

meterpreter. WiFi Pineapple interface for persistent meterpreter sessions

hera. Automated secure tunnels for services/containers via Cloudflare Argo

pwnbox. ansible playbook for setting up my pwn dev env

discover. For use with Kali Linux. Custom bash scripts used to automate various pentesting tasks.

holepunch-client. Totally self-contained SSH reverse tunnel written in Go

cryptoparty. Collection of outlines, walkthroughs, and talks about communicating securely in a surveillance state

dllinquent. Search running process for a given dll/function. Exposes a bufio.Scanner-like interface for walking a process' PEB

minbeacon. A work in progress of constructing a minimal http(s) beacon for Cobalt Strike.

unifi_syslogd. Simple little syslog server I made for troubleshooting UniFi firewall rules

mcpmap. List Resources, Tools, and Prompts. Execute Tools.

go-clr. A PoC package for hosting the CLR and executing .NET from Go

i3tab.nvim. super small, i3-like tabs. no buffers

bamflags. Parse out values from which a Binary Alignment Map is comprised

GitGot. Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

go-mimikatz. A wrapper around a pre-compiled version of the Mimikatz executable for the purpose of anti-virus evasion.

rcas-server-node. toy roster app using sockets and react

getsystem.rs. WIP

logerr. flexible and convenient logging

donloader. donLoader is a shellcode loader creation tool that uses donut to convert executable payloads into shellcode to evade detection on disk.

go-sshclient. simple sshclient with go

CVE-2024-20656. C++

hearsay. Proxy-aware reverse HTTP proxy.