Nim

GetSystem is a tool designed for elevating privileges by spawning SYSTEM shells effectively. Its primary use case is in penetration testing and security assessments, where gaining SYSTEM level access is crucial. Notable features include an included binary for ease of use and streamlined execution.

LOLSpoof is an interactive shell program designed to spoof command line arguments of spawned processes, specifically targeting 64-bit LOLBins. Its primary use case is to obscure such processes from detection by telemetry solutions used by antivirus, endpoint detection and response (EDR) systems, and security analysts. Notable features include the ability to craft a spoofed command line, the manipulation of process creation telemetry, and the handling of suspended processes to override command line parameters.

Chalk is a software provenance and attestation tool designed to offer a cryptographically verifiable chain of custody for production software with minimal configuration effort. It facilitates the automatic insertion of a tamperproof identifier into various software artifacts, allowing for easy integrity checks and correlation of provenance data. Notable features include support for build signature modes using Sigstore, integration with Docker’s SBOM tooling, and a continuous attestation model that aids in incident response, compliance, and tech stack visibility.

Nim Packages Security Audit is a fully automated tool designed to perform security audits on Nim packages and the Nim installation process. Utilizing GitHub Actions and PTrace, it conducts daily audits categorized by package type, allowing users to identify security vulnerabilities efficiently. Notable features include a structured categorization system and automation integrated with cron jobs, enhancing ease of use and continuous monitoring.