Skip to content
View joaovarelas's full-sized avatar

Organizations

@xSTF @securitytoolkit

Block or report joaovarelas

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
joaovarelas/README.md

About Me

  • πŸ’Ό Cybersecurity Professional
  • 🌍 Based in Portugal πŸ‡΅πŸ‡Ή
  • 🏞️ I enjoy mountain biking, traveling, and reading

Red Teaming | Offensive Tool Development | Reverse Engineering | Vuln Research | Application Security | DevSecOps

Windows Linux Active Directory Cloud Docker Kubernetes Terraform Ansible Virtualization

Rust C/C++ Assembly Python Java PowerShell Bash


🌟 Featured Projects

  • NTDShadow β€” Active Directory NTDS.dit extraction technique utilizing Volume Shadow Copies (VSS).
  • GodPotato++ β€” A native C++ rewrite of the GodPotato LPE exploit, optimized for stealth eliminating CLR (.NET) dependencies.
  • Steal Token Rust β€” Weaponizing the Windows API in Rust for access token theft and process impersonation.
  • Obfuscator-LLVM-16.0 β€” Compiler-level research on porting LLVM-based obfuscation to Rust.
  • Crystal-Kit β€” Contributed hooks WSASocket/WSAStartup for spoofing to evade EDR detection on network telemetry.
  • NetExec β€” Contributed Hyper-V enumeration module for the NetExec network exploitation tool (CrackMapExec successor).
  • Counter-Strike Game Hacking β€” Reverse engineering engine modules in C++ to design cheats like aimbot, triggerbot and ESP.
  • Cloud Storage k8s β€” Cloud-native file storage system deployed on Kubernetes with Terraform IaC, OIDC auth, autoscaling, and a full observability stack.

πŸ“Š Activity & Stats

GitHub Stats Top Languages

πŸ“« Connect

Pinned Loading

  1. Obfuscator-LLVM-16.0 Obfuscator-LLVM-16.0 Public

    Shell 146 24

  2. CVE-2021-30357_CheckPoint_SNX_VPN_PoC CVE-2021-30357_CheckPoint_SNX_VPN_PoC Public

    Proof-of-Concept for privileged file read through CheckPoint SNX VPN Linux Client

    6 1

  3. CVE-2020-1350.py CVE-2020-1350.py
    1
    #!/usr/bin/env python3
    2
    
                  
    3
    """cve-2020-1350.py: Windows DNS Server Vulnerability"""
    4
    
                  
    5
    __author__  = "@joaovarelas"
  4. ntdshadow ntdshadow Public

    Tool for extracting the NTDS.dit Active Directory database through Volume Shadow Copies (VSS).

    C++ 3 1

  5. CSGO-priv9-h00k CSGO-priv9-h00k Public

    Internal Counter-Strike: Global Offensive Hack released in 2018 (UC)

    C++ 1

  6. GodPotatoPlusPlus GodPotatoPlusPlus Public

    GodPotato but in C++.

    C++ 1 1