Iris is a highly configurable and flexible service for paging and messaging.

Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised. Portia performs privilege escalation as well as lateral movement automatically in the network

A *nix Enumerator & Auto Privilege Escalation tool.

Open source incident escalation tool

The Inspector tool is a privilege escalation helper (PoC), easy to deployed on web server, this tool can list process running with root, check kernel version, check history file, get possible exploit ...

Escalation / Bypass Windows UAC

A mobile interface for linkedin/iris, built for iOS and Android on the Ionic platform

Terraform module to provision Opsgenie resources from YAML configurations using the Opsgenie provider,, complete with automated tests

Shared library implementations that transform the containing process into a shell when loaded (useful for privilege escalation, argument injection, file overwrites, LD_PRELOAD, etc.).

Escalation Servers and Scripts for Priv Escalation

This lab demonstrates some of the security concerns of a default Kubernetes Engine cluster configuration and the corresponding hardening measures to prevent multiple paths of pod escape and cluster privilege escalation.

Terraform module that configures CloudWatch SNS alerts for EFS

A Step by Step Penetration Testing Sheet for Cyber Security Experts

Terraform module that configures CloudWatch SNS alerts for ElastiCache

A threat actor may perform unauthorized functions belonging to another user with a higher privileges level

A threat actor may perform unauthorized functions belonging to another user with a similar privileges level

CVE-2021-27928-POC

This is a simple Electron App that Notifies you for a pending issue from a DB check

I developed a rigorous cybersecurity project portfolio on mock clients covering NIST, audits, Linux, SQL, assets, threats, vulnerabilities, detection, incident response, escalation, Wireshark, tcpdump, IDS (Suricata), SIEM (Splunk, Chronicle), and Python automation.

Red team