Rob Fuller's Projects
The Dirty Secrets They Didn't Teach You In Pentesting Class
NPAPI DLL for Win32 API
Decrypt NTDS hashes
Cracks DES C3 piece of NTLMv1 and combines into Crack.sh format
SSIDs for the Hak5 Wifi Pineapple's PineAP setup
Some simple scripts for decrypting passwords retrieved from a Manage Engine OpManager installation
Cleans out "open" wireless connections from OSX machine
P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.
PAC HTTPS leak demo from DEF CON 24 'Toxic Proxies' talk
Proof-of-concept JavaScript malware implemented as a Proxy Auto-Configuration (PAC) File
An application for distributing oclHashcat tasks.
This project implements a data-driven password meter. Its effects on password security and usability were evaluated in the following publication: http://www.blaseur.com/papers/CHI17meter.pdf and a demo is available at: https://cups.cs.cmu.edu/meter/
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.
PHP Server Monitor
Bloodhound for Blue and Purple Teams
Repository of captive portals from around the world
Post Exploitation Collection
Post Exploitation Wiki
Windows privilege escalation through NTLM Relay and NBNS Spoofing
netshell features all in version 2 powershell
Useful PowerShell scripts
Scripts created to help with post exploitation of a Windows host
PowerSploit - A PowerShell Post-Exploitation Framework
PowerUp is a powershell tool to assist with windows local privilege escalation.
Analysis, detection, and removal of the "Power Worm" PowerShell-based malware
Public copies of my previous presentations
Exploitation paths allowing you to (mis)use the Windows Privileges to elevate your rights within the OS.
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent