Skip to content
View therealcoiffeur's full-sized avatar
🏴‍☠️
🏴‍☠️
20 followers · 0 following

Block or report therealcoiffeur

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
therealcoiffeur/README.md

Security Research & Offensive Engineering

Vulnerability Research · Exploit Development · Red Teaming

I explore attack surfaces, develop exploitation techniques, and build offensive security tooling.

Research · Red Teaming · Website · Conference & Talks

Research

Some of my public vulnerability research, exploitation techniques and tooling.

Research area Project Technical focus
Vulnerability Research Corporate Articles Published vulnerability research targeting web applications, macOS and telecommunications network equipment.
Advanced Exploitation Conferences Conference presentations on vulnerability research and advanced exploitation techniques.
macOS Security Research mtm (live) Local macOS attack-surface mapping.
Race Condition Exploitation SlowHorses Research tooling for exploiting race conditions by extending timing windows in PHP applications.

Over the years, I have explored a wide range of operating systems, frameworks, applications, and network equipment, uncovering vulnerabilities and developing exploits along the way.

View all
Apple macOS AfterLogic Bolt CMS
Cato Networks CodeIgniter4 D-Link
Dolibarr Dompdf Drupal
Jolokia Linux Mistral AI
mPDF Netgear PHP
PHPBoost CMS PHPFusion PHPWord
PROJECTWORLDS Qnap Rukovoditel
Sendy Snappy SPIP
Squiz Matrix Symfony Typo3
vBulletin VMware Fusion Wansview
Wordpress YesWiki Zabbix

For full details visit therealcoiffeur.com.

Red Teaming

Some of my offensive security tools spanning reconnaissance, initial access, implant staging, and persistence.

Phase Project Technical focus
Reconnaissance GhostReconRev Automated reconnaissance, asset discovery, service enumeration, and evidence collection.
Initial Access MalGit Git configuration abuse and Remote Code Execution techniques for initial access.
Implant Staging SNet macOS payload staging, RAM-backed execution, in-memory Mach-O loading.
Implant Staging PyleLess Linux fileless stager.
Persistence CapabiliTricks Linux capabilities abuse for privileged persistence.

Pinned Loading

  1. MalGit MalGit Public

    MalGit demonstrate multiple configuration based RCE vectors within Git.

    Shell 6

  2. Conferences Conferences Public

    Slides for various offensive security conferences.

  3. Corporate-Articles Corporate-Articles Public

    Articles published on the blogs of my various employers.

  4. SNet SNet Public

    Experimention of unconventional payload staging and execution for macOS.

    Python