A Metasploit auxiliary module that enumerates public Azure services by performing DNS queries against known Azure subdomain patterns. It can optionally permute keywords around the target domain. The module is self-contained, uses Metasploit's DNS enumeration mixin, and can be loaded into any Metasploit instance for cloud reconnaissance. Demonstrates skill in structuring DNS-based enumeration for cloud services.

A minimal Flask web application that serves as a C2 redirector. It returns a decoy HTML page on root, a healthcheck endpoint, and a /callback route that redirects only requests with a specific Chrome User-Agent string to a hidden C2 server. The logic is simple but effective for evading detection by making traffic look like legitimate CDN traffic. Includes a Dockerfile for containerized deployment.

A guide with embedded C source code for a malicious PAM module that captures username and password during authentication and writes them to /tmp/pam_su.tmp. The code demonstrates how to implement pam_sm_authenticate and pam_sm_setcred, compile, and install the module on Ubuntu. Reusable as a template for creating credential-stealing PAM modules in red team engagements.

A Rust program that enumerates MQTT topics by subscribing to the wildcard topic '#' and printing each unique topic discovered. Uses the rumqttc library with a simple keep-alive and hash set deduplication. The code is self-contained, requires only the rumqttc crate, and can be extracted as a standalone MQTT discovery tool for penetration testing.