-
oxasploits, llc
- Asheville, NC, USA
-
04:44
(UTC -05:00) - http://oxasploits.com
- @oxagast
- @oxagast@infosec.exchange
- https://franklin.oxasploits.com
- https://spaste.oxasploits.com
Lists (2)
Sort Name ascending (A-Z)
Starred repositories
sudo read() lib call jacking using /etc/ld.so.preload to skim passwords
Automatic SQL injection and database takeover tool
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
A number of exploits and tools I've written for CVEs accredited to Marshall Whittaker/oxagast
A Jekyll plugin to add Web Monetization API payment pointers to your site
All about bug bounty (bypasses, payloads, and etc)
Threadless Process Injection using remote function hooking.
Identify privilege escalation paths within and across different clouds
If you live in the terminal, kitty is made for you! Cross-platform, fast, feature-rich, GPU based.
⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock
A multithreaded bruteforcer of argon2 hashes.
wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-m…
BloodyAD is an Active Directory Privilege Escalation Framework
⚡ Dynamically generated stats for your github readmes
A simple LD_PRELOAD library to disable SSL certificate verification. Inspired by libeatmydata.
Jaws is an invisible programming language! Inject invisible code into other languages and files! Created for security research -- see blog post
CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit
a virtual black hole file system that behaves like /dev/null
Collection of Vim themes with barely any colors
A file system forensics analysis scanner and threat hunting tool. Scans file systems at the MFT and OS level and stores data in SQL, SQLite or CSV. Threats and data can be probed harnessing the pow…
A collection of scripts for the purpose of gathering open source intelligence, to be presented at GrayHat, BSides Denver, and Information Warfare Summit security conferences in 2020.
A collection of various tools for red-teaming exercises. A mix of C#, Powershell, & Python