Cisco IOS Security Inspector

A monster cheatsheet on MITM attacks

A .NET implementation to dump SAM / SECURITY / SYSTEM registry hives

A python script to dump files and folders remotely from a Windows SMB share.

Retrieve LAPS passwords from a domain. The tools is inspired in pyLAPS.

Orange Cyberdefense mindmaps

Dumping lsass without mimikatz with the exfiltration of the data using FAKE ntp packets

SoaPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) from Linux hosts.

MaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection.

Tool for viewing NTDS.dit

CVE-2025-24016: Wazuh Unsafe Deserialization Remote Code Execution (RCE)

Generate and Manage KeyCredentialLinks

psexecsvc - a python implementation of PSExec's native service implementation

Some nuclei templates for pentest CMS Bitrix

Custom password cracking rules for Hashcat and John the Ripper

⬛️ CLI tool and library for saving complete web pages as a single HTML file

An open-source remote desktop application designed for self-hosting, as an alternative to TeamViewer.

Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device.

Fast passive subdomain enumeration tool.

An implementation of PSExec in C#

SeImpersonate privilege escalation tool for Windows 8 - 11 and Windows Server 2012 - 2022 with extensive PowerShell and .NET reflection support.

A suite of services (SOCKS, FTP, shell, etc.) over Citrix, VMware Horizon and native Windows RDP virtual channels.

tomcat CVE-2024-50379/CVE-2024-56337 条件竞争文件上传exp

cve-2024-42327 ZBX-25623

Tool to extract username and password of current user from PanGPA in plaintext

LSASS memory dumper using only NTAPIs, creating a minimal minidump. It can be compiled as shellcode (PIC), supports XOR encryption, and remote file transmission.

jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security v…

WinVisor - A hypervisor-based emulator for Windows x64 user-mode executables using Windows Hypervisor Platform API