Tooling Archive

Tools gatheredat first light

Proofs of concept, scripts, and supporting utilities presented with the same premium archive treatment as the research notes.

Return Home View Research

Sorted by latest first. Showing 1-5 of 5.

Tooling

2026-04-17

proof of concept

Windows Terminal - Custom Console Handoff

A small proof of concept showing how to register a custom COM server to be activated through the Windows Terminal console handoff path.

Trackproof of concept

pocwindowsterminal

Read note

Tooling

2023-12-23

proof of concept

Built-In SHIM DB Hijacking

A theory on how to hijack built-in SHIM DB entries and use them for malicious purposes.

Trackproof of concept

pocwindowsappcompat

Read note

Tooling

2023-04-15

proof of concept

Fiddler Classic - Extension Persistence

Read more: Persistence With “Fiddler Classic” Extensions

Trackproof of concept

pocwindowspersistence

Read note

Tooling

2023-04-15

proof of concept

Malicious CHM

A small proof of concept showing how to create a malicious CHM file that executes code when opened.

Trackproof of concept

pocwindowschm

Read note

Tooling

2021-07-17

pentest

GlassFish Admin Console Bruteforce

Simple Python script for brute-forcing the GlassFish or Payara admin console via the API or j_security_check login flow.

Trackpentest

pentestwindowsglassfish

Read note

Tools gatheredat first light

5 notes

Windows Terminal - Custom Console Handoff

Built-In SHIM DB Hijacking

Fiddler Classic - Extension Persistence

Malicious CHM

GlassFish Admin Console Bruteforce