karmaz95 Goto Github PK

followers: 109.0 following: 1.0 repos: 255.0 gists: 0.0

Name: Karol Mazurek

Type: User

Company: Afine

Bio: Offensive Security Engineer 🍎

Twitter: Karmaz95

Blog: https://karol-mazurek.medium.com/

👨‍💻 About Me

I am a passionate Offensive Security Engineer from afine, committed to finding 👾 bugs and developing 🤖 software that enhances our work in security. My main areas of interest are 🍎 macOS internals and 🕸️ web application security. I also have experience in 💠 Active Directory and creating 🦠 malware to bypass 🛡️ EDRs.

🔭 Projects I am proud of

I created some tools helpful for Offensive Security work, but there are two that I am the most proud of, they are:

Crimson - this was my first big thing. Currently, I am not focusing on this tool. However, it is still powerful. My friends and I are using it to this day. This is also a great place to start your journey with Application Security.
Snake&Apple - The code repository for the Snake&Apple article series documents my macOS security research.

🐛 CVE I am proud of

As my daily work and some part of my free time research, I am looking for bugs 🐛. I have caught many of them so far, and some have even received a public CVE. I am particularly proud of these two:

📖 Blog

In my free time, I also run a blog about - guess what 😆

🎖️ Certs & CTFs & Courses

I have participated in multiple CTFs, completed various courses, and obtained certifications through various platforms. Below are links that demonstrate some of these small accomplishments:

Certs - OSCE³, eWPTxv2, OSCP, OST2-Arch1001
Pentesterlab - various web hacking courses & CTFs.
RPISEC/MBE - Modern Binary Exploitation - CSCI 4968
HTB - CTFs & Pro Labs
CS50 - Harvard University - Introduction to Computer Science

📫 Social Media

You can reach me here:

💰 Funding

If you enjoy my work and want to help me grow, you can sponsor me using any of the below options:

❗By subscribing to my Patreon, you will receive access to all of my published articles.

Karol Mazurek's Projects

2bfuzz

Simple TCP fuzzer and a payload generator.

3snake

Tool for extracting information from newly spawned processes

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

adcheatsheet

Active Directory Cheat Sheet

adcstemplate

A PowerShell module for exporting, importing, removing, permissioning, publishing Active Directory Certificate Templates. It also includes a DSC resource for creating AD CS templates using these functions. This was built with the intent of using DSC for rapid lab builds. Could also work in production to move templates between AD CS environments.

aem-hacker

aemscan

Adobe Experience Manager Vulnerability Scanner

afl

american fuzzy lop - a security-oriented fuzzer

afl-training

Exercises to learn how to fuzz with American Fuzzy Lop

aflplusplus

The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

anew

A tool for adding new lines to files, skipping duplicates

apache-http-server-2.4-cis-benchmark-script

Apache HTTP Server 2.4 Automation Script according to CIS Benchmarks

arm-cpusysregs

Access Arm64 CPU system registers

assetfinder

Find domains and subdomains related to a given domain

awesome-network-security

This is a repository for network security tools and technologies.

bandit

Bandit is a tool designed to find common security issues in Python code.

bettersafetykatz

Fork of SafetyKatz that dynamically fetches the latest pre-compiled release of Mimikatz directly from gentilkiwi GitHub repo, runtime patches signatures and uses SharpSploit DInvoke to PE-Load into memory.

burp-copy-as-ffuf

Burp Extension that copies a request and builds a FFUF skeleton

burp_extensions_downloader

It is s a simple script to automatically download selected, up-to-date Burp Suite Extensions (handy for internal tests).

byp4xx

Pyhton script for HTTP 40X responses bypassing. Features: Verb tampering, headers, #bugbountytips tricks and 2454 User-Agents.

bypass-clm

PowerShell Constrained Language Mode Bypass

cave_miner

Search for code cave in all binaries

cdn-proxy

A tool that can be used by web app pentesters to create a copy of the targeted website with CDN and WAF restrictions disabled.

cf-check

CloudFlare Checker written in Go

cheatsheets

Cheat sheets for various projects.

ciphey

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

clif

cmseek

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs

code_caver

Python based WinDbg script to automate the search for code caves in binaries and libraries.

codeql-cli-binaries

Binaries for the CodeQL CLI