Skip to content
@AlmondOffSec

AlmondOffSec

Almond Offensive Security Team

Popular repositories Loading

  1. PassTheCert PassTheCert Public

    Proof-of-Concept tool to authenticate to an LDAP/S server with a certificate through Schannel

    Python 777 93

  2. DCOMRunAs DCOMRunAs Public

    Lateral movement with DCOM DLL hijacking

    C 184 23

  3. PoCs PoCs Public

    Proof-of-concept code for various bugs

    PowerShell 109 35

  4. LibTPLoadLib LibTPLoadLib Public

    Using call gadgets to break the call stack signature used by Elastic on proxying a module load. Provided as a Crystal Palace shared library. Format inspired by @rasta-mouse's LibTP.

    C 88 7

  5. tdo_dump tdo_dump Public

    Proof-of-Concept tool to dump trusted domain objects

    Python 47 6

  6. GOAD_hyperv GOAD_hyperv Public

    Vagrant style script to build GOAD on Hyper-V

    PowerShell 9 1

Repositories

Showing 9 of 9 repositories
  • PassTheCert Public

    Proof-of-Concept tool to authenticate to an LDAP/S server with a certificate through Schannel

    AlmondOffSec/PassTheCert's past year of commit activity
    Python 777 Apache-2.0 93 0 0 Updated Aug 24, 2026
  • tdo_dump Public

    Proof-of-Concept tool to dump trusted domain objects

    AlmondOffSec/tdo_dump's past year of commit activity
    Python 47 6 0 0 Updated May 14, 2026
  • certbot-plugin-burpcollaborator Public

    Certbot plugin for authentication using Burp Collaborator

    AlmondOffSec/certbot-plugin-burpcollaborator's past year of commit activity
    Python 0 0 0 0 Updated Mar 20, 2026
  • misc Public

    Miscellaneous code

    AlmondOffSec/misc's past year of commit activity
    Python 0 0 0 0 Updated Feb 27, 2026
  • LibTPLoadLib Public

    Using call gadgets to break the call stack signature used by Elastic on proxying a module load. Provided as a Crystal Palace shared library. Format inspired by @rasta-mouse's LibTP.

    AlmondOffSec/LibTPLoadLib's past year of commit activity
    C 88 7 0 0 Updated Nov 6, 2025
  • DCOMRunAs Public

    Lateral movement with DCOM DLL hijacking

    AlmondOffSec/DCOMRunAs's past year of commit activity
    C 184 23 0 0 Updated Jul 4, 2025
  • PoCs Public

    Proof-of-concept code for various bugs

    AlmondOffSec/PoCs's past year of commit activity
    PowerShell 109 Apache-2.0 35 0 0 Updated Oct 30, 2024
  • GOAD_hyperv Public

    Vagrant style script to build GOAD on Hyper-V

    AlmondOffSec/GOAD_hyperv's past year of commit activity
    PowerShell 9 1 0 0 Updated Sep 25, 2024
  • OpenEdgeABL-Loader Public

    A super basic shellcode loader written in "OpenEdge Advanced Business Language", for when somehow the only method for code execution you found is through a niche business-oriented programming language.

    AlmondOffSec/OpenEdgeABL-Loader's past year of commit activity
    OpenEdge ABL 2 0 0 0 Updated Sep 20, 2024

Top languages

Loading…

Most used topics

Loading…