read-team

A stealthy, cross-platform C2 and adversary simulation framework Proof-of-Concept in Rust, designed for ethical cybersecurity research.

Hello World!. This is my Best GITHUB Profile.

Three PowerShell scripts to silently disable, backup, and restore standard USB webcams on Windows. No privacy flags, no group policy fingerprints – just a generic driver error.

A comprehensive reference for thick client pentesting on macOS, synthesized from CyberArk Labs research (Parts 1–3) and community writeups. Covers everything from app structure to dylib hijacking and XPC attacks

A repository for all the vulnerable software used for tutorials in Hackercool Magazine - the cyber security mag for beginners.

A complete offensive security roadmap covering web hacking, Active Directory, red teaming, exploit development, malware analysis, cloud attacks, and real-world adversary techniques.

Open-source SDK to test AI agents before they break in production adversarial scenarios generated from your own agent's prompts.

My blog about my projects and my learning in Hacking and Web.

My personal website built with React.js & TailwindCSS

PoC`s finding tool

This is an automated exploitation script for the Hack The Box machine *Titanic*. It extracts Gitea user hashes via LFI, assists in cracking them, and exploits an ImageMagick vulnerability (CVE-2024-41817) to gain root access via a malicious shared library.

This script fully automates the exploitation of the retired Hack The Box machine Alert, including both initial intrusion and privilege escalation to root

conceptos varios de ciberseguridad blue & red team , voy añadiendo según avanzo, pequeños esquemas . Comprehensive Red & Blue Team cybersecurity guide - Attack & Defense concepts, penetration testing, ethical hacking, and security techniques for OSCP, CEH, and security professionals

This script automates the exploitation process of the Administrator machine from Hack The Box. It is divided into three phases to simplify and control manual steps that require user interaction, such as password cracking.

My live Cybersecurity Portfolio

Passive OSINT recon tool — subdomain discovery, port enumeration, breach correlation, Markdown report generation.

Modular Python keylogger with AES-encrypted keystroke transmission, screenshot capture, and a Flask-based C2 server — built for adversarial simulation and endpoint detection research.

Streamlit workbench for running jailbreak experiments on LLMs via OpenRouter: repeated sampling, LLM-as-a-Judge grading, manual relabeling and an analytics dashboard.

This is an automated privilege escalation script for the Hack The Box machine LinkVortex, which exploits an insecure sudo configuration and symbolic link processing vulnerability.

This is an automated exploitation script for the Hack The Box machine *Heal*. It extracts LimeSurvey credentials via LFI and deploys a malicious LimeSurvey plugin to trigger a reverse shell.