GitHub / dc401 44 Repositories
Veteran owned and operated cyber security firm that specializes in cyber-physical integration including AI enabled SOC, SecOps Advisory, Pen Testing, and more.
dc401/py-vthashcheck
A proof of concept AWS Lambda Python 3.7 runtime that takes Amazon S3 objects, evaluates against file magic MIME types, and will check existing SHA256 hashes or upload the file to VirusTotal using an API key. The API key is retrieved using security best practices with AWS Secrets Manager cached to reduce API overhead.
Language: Python - Size: 13.1 MB - Last synced at: 2 days ago - Pushed at: over 2 years ago - Stars: 2 - Forks: 0

dc401/rttd-a-hands-on-guide-for-evasion
This is the companion repo for a copy of all code, references, and extras noted by the Red Team Tool Development: A Hands-on Guide for Evasion by Dennis Chow and Michael LaSalvia
Size: 1000 Bytes - Last synced at: 2 days ago - Pushed at: 20 days ago - Stars: 0 - Forks: 0

dc401/cwx-demo-gcp
This repo is for the Detection as Code CI/CD pipeline demo in the Cyberwox series by Day Johnson and Dennis Chow for Cloud Custodian and GCP demonstration using integration testing.
Language: Python - Size: 1.79 MB - Last synced at: 2 days ago - Pushed at: 9 months ago - Stars: 2 - Forks: 1

dc401/goklog
Go based Windows Keylogger sending ASCII to Webhooks
Language: Go - Size: 6.4 MB - Last synced at: 2 days ago - Pushed at: 11 months ago - Stars: 4 - Forks: 0

dc401/dynamic-instrumentation
Binary patching examples tutorial with dynamic instrumentation and traditional methods with a debugger.
Language: JavaScript - Size: 4.72 MB - Last synced at: 2 days ago - Pushed at: about 3 years ago - Stars: 4 - Forks: 0

dc401/poe-ai-agent-example
This is an example build of using Poe.com's API to create an LLM based AI agent that can execute commands and tools in a multi-shot way without relying on LangGraph, LangChain, GCP Vertex, or Amazon Bedrock.
Language: Python - Size: 458 KB - Last synced at: 2 days ago - Pushed at: 6 months ago - Stars: 1 - Forks: 0

dc401/icmp-bindshell
Experimental python3.x based ICMP bind shell listener using scapy and windows 'compatible'
Language: Python - Size: 237 KB - Last synced at: 2 days ago - Pushed at: about 5 years ago - Stars: 10 - Forks: 0

dc401/scissecurity.github.io
Landing page for scissecurity.com
Language: HTML - Size: 672 KB - Last synced at: 2 days ago - Pushed at: 5 months ago - Stars: 0 - Forks: 0

dc401/goslowc2
A demonstration of using GoLang and GCP Storage for a quick and easy evasion payload.
Language: Go - Size: 109 KB - Last synced at: 2 days ago - Pushed at: 7 months ago - Stars: 0 - Forks: 1

dc401/dataexfil-ultrasound
A simple script to demonstrate data exfiltration using the ggwave API creating ultrasound audio.
Language: PowerShell - Size: 293 KB - Last synced at: 2 days ago - Pushed at: over 4 years ago - Stars: 3 - Forks: 1

dc401/public-staging
Data staging for simulations
Size: 7.57 MB - Last synced at: 2 days ago - Pushed at: 10 months ago - Stars: 0 - Forks: 0

dc401/rwgopack
Example Linux based packer for ELF binaries that uses ZLib to compress and then XOR cipher single byte key the payload while creating a self unpacking binary.
Language: Python - Size: 8.14 MB - Last synced at: 2 days ago - Pushed at: 11 months ago - Stars: 2 - Forks: 0

dc401/AWS-CDK-SecurePipeline
Create a secure CI/CD Pipeline using CDK and BridgeCrew and Bandit using Python 3
Language: Python - Size: 85.9 KB - Last synced at: 2 days ago - Pushed at: about 1 year ago - Stars: 1 - Forks: 0

dc401/gologexfil
Quick and dirty method do data exfil binary files in the form of hex strings to GCP's cloud logging easily bypassing most DLP
Language: Go - Size: 601 KB - Last synced at: 2 days ago - Pushed at: over 2 years ago - Stars: 0 - Forks: 0

dc401/gocrack
Example multi-threaded and single-threaded GoLang ability to crack SHA2-256 based hashes using wordlists
Language: Go - Size: 177 KB - Last synced at: 2 days ago - Pushed at: over 2 years ago - Stars: 0 - Forks: 0

dc401/py-obfuscation-payloadgen
A generator for a simple way using polymorphic capabilities of obfuscating Python3 based payload using a simple key, transposition with ROT-13, and substitution of whitespaces with random number of hashtags
Language: Python - Size: 5.3 MB - Last synced at: 2 days ago - Pushed at: over 2 years ago - Stars: 0 - Forks: 1

dc401/tensorflow-insiderthreat
Experimental ONLY: This consolidated data of scenario-2 of the US-CERT dataset for insider threats to be used with TF 2.0 and Keras
Language: Python - Size: 1.28 MB - Last synced at: 2 days ago - Pushed at: about 3 years ago - Stars: 20 - Forks: 12

dc401/fileMagic_RoboCopyPS
Quick and dirty PowerShell script that utilizes the GNU Win32 File command and magic DB to search for file types based on header rather than by extension and will copy the files to a destination that is forensically sound using robocopy. Licensed under GPL v2
Language: PowerShell - Size: 655 KB - Last synced at: 2 days ago - Pushed at: about 5 years ago - Stars: 1 - Forks: 0

dc401/mixed_scripts
Various scripts for anyone to use or mod that some may find useful. All licensed under GPL v2
Language: Jupyter Notebook - Size: 3.02 MB - Last synced at: 2 days ago - Pushed at: about 1 year ago - Stars: 2 - Forks: 1

dc401/RemoteAcquireCLI
Remotely deploy this script back to Windows or Linux hosts and do remote acquisition for memory, logical, and physical images.
Language: Batchfile - Size: 1.05 MB - Last synced at: 2 days ago - Pushed at: about 8 years ago - Stars: 2 - Forks: 1

dc401/ADQuery_DNS_Host_Search
This script uses the System.Net.Dns calls for IPv4 resolution from an expanded AD Computername Query into a CSV file.
Language: PowerShell - Size: 24.4 KB - Last synced at: 2 days ago - Pushed at: over 1 year ago - Stars: 0 - Forks: 1

dc401/terraform-cloudflare-waf-demo
A demo repo of utilizing the Github VCS with terraform cloud as thd runner.
Language: HCL - Size: 6.84 KB - Last synced at: over 1 year ago - Pushed at: over 1 year ago - Stars: 0 - Forks: 0

dc401/TCPOptionsDataExfil
Experimental scripts using Python 3.x and Scapy to transmit data to closed (or open) ports between hosts using only TCP Options
Language: Python - Size: 212 KB - Last synced at: 2 days ago - Pushed at: about 5 years ago - Stars: 5 - Forks: 1

dc401/tines-soar-automation-playbooks
Automation playbooks created for use with Tines Cloud SOAR
Size: 341 KB - Last synced at: 2 days ago - Pushed at: almost 2 years ago - Stars: 0 - Forks: 0

dc401/shellcode-analysis
This repo hosts basic win32 compatible and visual studio C based shell code for an article on analysis
Language: C - Size: 142 KB - Last synced at: 2 days ago - Pushed at: about 5 years ago - Stars: 1 - Forks: 3

dc401/dicom-analysis
How to Simulate and Troubleshoot Medical Imaging Transfers
Size: 496 KB - Last synced at: 2 days ago - Pushed at: over 4 years ago - Stars: 0 - Forks: 0

dc401/PS-Get-WinCompromiseStatus
A simple PowerShell Module for finding IOC's across your Windows Network
Language: PowerShell - Size: 12.7 KB - Last synced at: 2 days ago - Pushed at: over 4 years ago - Stars: 0 - Forks: 2

dc401/terraform-aws-ssrfdemo
Contains example terraform modules to deploy a SSRF demo leveraging AWS EC2 instance, PHP creating a new VPC, IGW using a public subnet.
Language: HCL - Size: 42 KB - Last synced at: 2 days ago - Pushed at: about 3 years ago - Stars: 0 - Forks: 0

dc401/pub-misc
Size: 478 KB - Last synced at: 2 days ago - Pushed at: about 2 years ago - Stars: 0 - Forks: 0

dc401/SIGC2
A simple proof of concept client and server script to send codified messages in the form of signals to PC's on the domain in Windows over SMB. Some features include randomization timing and actions based on different signaling conditions.
Language: PowerShell - Size: 102 KB - Last synced at: 2 days ago - Pushed at: about 5 years ago - Stars: 2 - Forks: 0

dc401/FileParsePS
File Parser that can parse through data for delimiters and substitute them and additionally search/grep for a string for more focused output.
Language: PowerShell - Size: 24.4 KB - Last synced at: 2 days ago - Pushed at: about 5 years ago - Stars: 1 - Forks: 1

dc401/Dynamic-Salting-Example
This is a demo project to show the proof of concept behind dynamic salting as opposed to static salting. Many developers mistakenly use the same salt in addition to a user's password to create a new hash. Unfortunately, attackers can pre-compute static salts easily as well by doing the same thing. Using dynamic salting by creating complex functions that determine what the salt is based on user record information can help increase the barrier and reduce the risk of pre-computed attack success rate.
Language: Visual Basic .NET - Size: 169 KB - Last synced at: 2 days ago - Pushed at: about 5 years ago - Stars: 2 - Forks: 0

dc401/cybercounterintel
Rogue cyber security professional detection mindmap
Size: 222 KB - Last synced at: 2 days ago - Pushed at: about 5 years ago - Stars: 2 - Forks: 1

dc401/intro2ciphersignals
An introduction to crypto ciphers and signals intelligence for parents to teach their kids.
Language: PowerShell - Size: 944 KB - Last synced at: 2 days ago - Pushed at: about 5 years ago - Stars: 0 - Forks: 0

dc401/AD_Force_UserLogoff
Enumerates hosts in AD for a logged on user and attempts to boot them off their interactive console sessions on found hosts.
Language: PowerShell - Size: 192 KB - Last synced at: 2 days ago - Pushed at: about 5 years ago - Stars: 1 - Forks: 1

dc401/SMS_Bomber
Rapid SMS sending utility using SMTP relays.
Language: Visual Basic .NET - Size: 71.3 KB - Last synced at: 2 days ago - Pushed at: about 5 years ago - Stars: 1 - Forks: 1

dc401/entropyCheckPS
Perform entropy checking for unknown data types on windows local drives or shares in Powershell. Useful for checking for potentially ransomware encrypted files.
Language: PowerShell - Size: 983 KB - Last synced at: 2 days ago - Pushed at: about 5 years ago - Stars: 1 - Forks: 1

dc401/CTI_Helpers
Supporting Cyber Threat Intelligence Tools
Language: PowerShell - Size: 10.7 KB - Last synced at: 2 days ago - Pushed at: about 5 years ago - Stars: 0 - Forks: 0

dc401/Splunk_Remediation_Scripts
Scripts for Splunk Alerts
Language: PowerShell - Size: 202 KB - Last synced at: 2 days ago - Pushed at: about 5 years ago - Stars: 0 - Forks: 0

dc401/facerecog
Proof of Concept Face Recognition in the Cloud
Language: Python - Size: 128 KB - Last synced at: 2 days ago - Pushed at: about 5 years ago - Stars: 0 - Forks: 0

dc401/NexposeRubyScripts
Example or test Nexpose scripts made using the Ruby Gem
Language: Ruby - Size: 10.7 KB - Last synced at: 2 days ago - Pushed at: about 5 years ago - Stars: 0 - Forks: 0

dc401/Auto-Tab-Switcher-.NET
Alt Tabs between two application windows
Language: Visual Basic .NET - Size: 76.2 KB - Last synced at: 2 days ago - Pushed at: about 5 years ago - Stars: 0 - Forks: 0

dc401/MalFind
Batch Script that takes file objects and identifies file magic items and copies to current working directory. The script also uploads everything to VirusTotal.
Language: Batchfile - Size: 21.5 KB - Last synced at: 2 days ago - Pushed at: about 5 years ago - Stars: 0 - Forks: 1

dc401/pentest-payloads
Basic payloads for testing or pexperiments
Language: HTML - Size: 1000 Bytes - Last synced at: 2 days ago - Pushed at: almost 6 years ago - Stars: 0 - Forks: 0
