GeezerVison — Shellcode.Blog

Home|About|Gaming cabinet|Archives|How it works|Starter sites

GeezerVison is showing shellcode.blog — Shellcode.Blog

Skip to content

List of @Mohadsec Research & Open Source Projects

2026-08-27 CVE-2026-8795: Velociraptor YAML injection allows arbitrary execution on the analyst's machine
2025-12-02 AI SOC agent & MCP server for automated security investigation, alert triage, and incident response Blackhat MEA 2025
2025-11-28 CVE-2025-59287: WSUS SoapFormatter RCE Investigation & Honeypot Analysis
2025-06-07 Velociraptor artifact for automated Thor YARA scanning
2025-06-04 Deployment and testing platform for Velociraptor's client artifacts
2025-03-24 RamiGPT: Autonomous Privilege Escalation AI agent
2024-05-29 CyRC Advisory: CVE-2024-5185 - AI Web Application Data Poisoning Vulnerability
2024-05-29 Git Scanner: Detect Sensitive Data in Organization Repositories
2023-02-26 Nmap Detection Scripts for CVE-2022-45477, CVE-2022-45479, CVE-2022-45482, CVE-2022-45481
2022-11-30 CyRC Advisories: CVE-2022-45477, CVE-2022-45478, CVE-2022-45479, CVE-2022-45480, CVE-2022-45481, CVE-2022-45482, CVE-2022-45483 - Remote Code Execution Vulnerabilities in Different Mouse and Keyboard Applications
2022-11-30 Multiple RCEs in Different Mouse and Keyboard Applications
2022-06-30 Nginx 0.6.18 < 1.20.1 Memory Overwrite Vulnerability Proof of Concept CVE-2021-23017
2022-06-05 Automating the build of a Vulnerable AD environment (IaC)
2022-04-04 Multiple Web Vulnerabilities on Rumble Mail Server 0.51.3135 CVE-2021-43459 CVE-2021-43461 CVE-2021-43462
2021-11-24 Presentation Hacking From the Sky - Building a Penetration Testing UAV prototype
2021-07-25 @Miner Automated Vulnerability Discovery in Windows Applications - 12 CVEs
2021-06-20 Resource Efficient Internal Network Honeypots (Homelab)
2021-05-31 Microsoft security researcher acknowledgment May 31, 2021
2021-05-01 Windows Memory-Injected Malware Detection Freeware Comparison
2021-03-22 Applied Purple Teaming Series ( Attack, Detect, & Defend ) Part 3
2021-03-02 DHCP Starvation & DHCP Spoofing attacks On Cisco Network Switches (Infrastructure Security)
2021-02-14 Applied Purple Teaming Series ( Weaponize Windows ) Part 2
2021-02-13 Quick and Dirty Reconnaissance and Vulnerability Scanning Tool
2021-02-11 Playbook that randomly selects malware and deploys it to add a layer of difficulty when practicing IR & Threat Hunting (Blue-Team)
2021-02-07 Applied Purple Teaming Series ( The Virtual Environment ) Part 1
2021-02-02 Studying Sysmon's Ability to Detect Process Injections Using Different Configuration Schemas
2021-02-02 Traccar GPS Tracking System service path vulnerability CVE-2021-21292
2021-02-01 Ansible playbook designed to configure and deploy rsyslog, Wazuh, Kolide Fleet launcher, OSquery, and Winlogbeat for Windows and Linux (Blue-Team)
2020-12-06 "It's ours now" is a C# tool that collects unpacked/downloaded files using Windows event handlers (Malware-analysis)
2020-10-19 Unquoted service path on Veyon Microsoft Windows LPE CVE-2020-15261
2020-08-12 RosarioSIS < 6.5.1 Reflected Cross-Site Scripting CVE-2020-13278
2020-07-28 rConfig Network Device Configuration Management 3.9.5 RCE CVE-2020-15715
2020-07-28 rConfig Network Device Configuration Management 3.9.5 SQLi CVE-2020-15714, CVE-2020-15713
2020-07-28 rConfig Network Device Configuration Management 3.9.5 LFI CVE-2020-15712
2020-07-15 RosarioSIS 6.7.2 Reflected Cross-Site Scripting CVE-2020-15718, CVE-2020-15717, CVE-2020-15716, CVE-2020-15721
2020-04-24 Admidio version 3.3.13 Unauthenticated SQLi CVE-2020-11004
2020-04-03 CellTower is credentials, events, and any data logging tool QSearchSploit (Red-Team)
2020-04-02 Malicious patch for Pfsense router to perform Red Team activities Bfsense (Red-Team)
2020-03-31 Leantime management system < 2.0.15 BSQL Injection CVE-2020-5292
2020-01-27 Scalable infrastructures for Red/Blue/Gray-Team themed competitions Stateless (IaC)
2020-01-05 Google Chrome Extension Automates Testing Fundamental Web Problems (Pentesting)
2020-01-02 Processes To Watch For Unwanted & Unexpected Blue Team Actions Windows Persistence (Red-Team)
2019-12-31 In-memory implant that uses C# techniques to bypasses Windows Firewall and Defender C2 (Red-Team)
2019-12-22 2019 End-of-Year Infrastructure Upgrades
2019-12-19 Developing Use Cases That Nefariously Utilize Twitter's API For The Purpose of Building Covert Communications Talk & Paper (Red-Team)
2019-12-19 Hidden in Plain Sight: Developing Use Cases That Nefariously Utilize Twitter’s API For The Purpose of Building Covert Communications
2019-10-30 Post-exploitation C2 that targets browsers Write-up & tool (Red-Team)
2019-10-28 Integrated Windows rootkit projects and persistence techniques Nemo (Red-Team)
2019-10-11 Integrating C3 With Cobalt Strike via ExternalC2 And Studying Their Behavior
2019-10-02 Information theft through covert channel by exploiting HTTP Post method (PoC)
2019-09-24 Malicious process monitors and infects specific kinds of files (Red-Team)
2019-08-12 Preparation material to prepare for AWAE course (Resources)
2019-08-01 PWNDashboard, Engagements and competitions dashboard (Red-Team)
2019-06-07 BlueDucky, Creates a list of USB-Rubber-Ducky instructions (Blue-Team)
2019-05-28 Clearview, Web Application Challenge (Education)
2019-05-18 A Golden Image for Our Pentest VMs
2019-05-15 Ansible playbook to customize Kali Linux Kai-TX (Tool)
2019-02-05 Customizing Searchsploit outputs from Kali Linux QSearchSploit (Tool)
Windows Exploit Development: Egg Hunting
Windows Exploit Development: Unicode and Venetian shellcode techniques
Detecting Bugs Using Network Protocol Fuzzing
Exploit Development: Utilizing imported functions
Exploit Development: Manually Encode Bytes & Shellcode Carving
2019-01-21 TorMultiplier creates multiple Tor sockets PoC
2019-01-14 C2 project controls a self-propagating MS17-010 worm M-Botnet (Red-Team)
2018-10-30 Simple CLI web Intruder that uses Netcat