FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Original HTTPS Page]

t3l3machus (Panagiotis Chartas) · GitHub

Focusing
Focusing

Sponsors

Block or report t3l3machus

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Close all issues, pull requests, and discussions opened by this user Content in all repositories owned by your account will be closed.
Add an optional note
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
t3l3machus/README.md

Connect with me / Support:

Hi, I'm t3l3machus, Penetration Tester & Cybersec Researcher from Athens, Greece 🇬🇷, currently living in Poland 🇵🇱.
Check out my channel on YouTube! -> HaxorTechTones

Projects & Contributions:

💥 Offensive Security Tools
Project Short Description Stars Forks
Villain A C2 backdoor generator and multi-session handler.
toxssin An XSS exploitation command-line interface.
hoaxshell A Windows reverse shell payload generator and handler that abuses the http(s)
protocol to establish a beacon-like reverse shell.
psudohash A password list generator based on keywords mutated by commonly used patterns and more.
PowerShell-Obfuscation-Bible A collection of techniques, examples and a little bit of theory for manually obfuscating PowerShell scripts.
ACEshark ACEshark is a utility designed for rapid extraction and analysis of Windows service configurations and Access Control Entries, eliminating the need for tools like accesschk.exe or other non-native binaries.
kcbrute Basic brute-force script targeting the standard Keycloak Admin/User Console browser login flow.
eviltree A python3 remake of the classic "tree" command with the additional feature of searching for user provided keywords/regex in files, highlighting those that contain matches.
wwwtree A utility for quickly and easily locating, web hosting and transferring resources during PrivEsc.
CVE-2023-22960 PoC for CVE-2023-22960 (Brute-force prevention mechanism bypass for Lexmark devices' web interface).
Synergy Httpx A Python http(s) server designed to assist in red teaming activities such as receiving intercepted data via POST requests and serving content dynamically (e.g. payloads).
Undust.py undust is a URL pattern generator that helps uncover archived, backup, and temporary files left behind on web servers. Given a URL, it generates the most common archive, temp and backup file name variants.
BabelStrike Performs Romanization and name-to-usernames convertion of full name lists.
pentest-pivoting A network pivoting guide for pentests / CTFs.
Contributions
Project Short Description Contribution
nuclei-templates Templates are the core of the nuclei scanner which powers the actual scanning engine. Templates contributed: CVE-2024-2340, sap-public-admin, chirpstack-default-login
reverse-shell-generator (revshells.com) Hosted Reverse Shell generator with a ton of functionality. Added HoaxShell and front-end style improvements.
Cadiclus Privilege Escalation Tool for Linux Systems that use PowerShell. Added the Invoke-CredentialHunting module.
🌀 CVEs
CVE Short Description References
CVE-2023-22960 Lexmark devices have a feature that protects against local account credential brute-force guessing attacks by temporarily locking out an account for an amount of time after a number of unsuccessful login attempts. This vulnerability bypasses the brute-force protection, allowing unrestricted attempts to guess a local account's credentials. Works for PIN-based authentication as well. CVE-2023-22960 Publication
⚡ Other Tools, Guides, etc
Project Short Description Stars Forks
ssh-log-alert Receive email alerts on successful ssh logins (mailgun).
gmail-ssh-log-alert Receive email alerts on successful ssh logins (gmail).
cybersec-service-metrics A spreadsheet designed to automatically generate Key Performance Indicators
for Cyber Security Services based on documented data. Ideal for Team leaders / Managers of small-medium sized organizations.
Awesome-AI A list of awesome AI resources around the internet.
OWASP-Testing-Guide-Checklist OWASP based Web Application Security Testing Checklist.

Pinned Loading

  1. Villain Villain Public

    Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share th…

    Python 4.4k 696

  2. hoaxshell hoaxshell Public

    A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.

    Python 3.5k 525

  3. toxssin toxssin Public

    An XSS exploitation command-line interface and payload generator.

    Python 1.4k 198

  4. psudohash psudohash Public

    Generates millions of keyword-based password mutations in seconds.

    Python 1.5k 175

  5. PowerShell-Obfuscation-Bible PowerShell-Obfuscation-Bible Public

    A collection of techniques, examples and a little bit of theory for manually obfuscating PowerShell scripts to achieve AV evasion, compiled for educational purposes. The contents of this repository…

    1.2k 137

  6. ACEshark ACEshark Public

    ACEshark is a utility designed for rapid extraction and analysis of Windows service configurations and Access Control Entries, eliminating the need for tools like accesschk.exe or other non-native …

    Python 150 23


Back | FazBrowse Home | New Git URL