CLI tool to interact with the BloodHound CE API

NSudo - A Powerful System Administration Tool

[fork] Library for lifting of x86, amd64, and aarch64 machine code to LLVM bitcode

Kerberos manipulation library in pure Python

A QoL tool to obfuscate shellcode.

Backend development stack for agents

Machine Learning Network Share Password Hunting Toolkit

GUI alternative to the Rubeus command line tool, for all your Kerberos exploit requirements

Payload Obfuscation for Red Teams workshop materials

A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.

Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST

NOPe - Testing some alternate NOP opcodes

TIBER-Cases is a project created to give cases of The Hive platform for Threat Intelligence Analysts mainly. All the cases are mapped to TIBER-EU processes.

MLOps Attack Toolkit

Azure DevOps Services Attack Toolkit

Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel

A technique to run binaries filelessly and stealthily on Linux using dd to replace the shell with another process.

Ready to go Phishing Platform

New generation of wmiexec.py

Impacket is a collection of Python classes for working with network protocols.

JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP Server, RMI Server and LDAP Server to exploit java web apps v…

Exploiting ring0 memcpy-like functionality to disable Driver Signing Enforcement (DSE)

Proof-of-concept obfuscation toolkit for C# post-exploitation tools

This is a command line interface for the Interceptor library

This repo contains driver samples prepared for use with Microsoft Visual Studio and the Windows Driver Kit (WDK). It contains both Universal Windows Driver and desktop-only driver samples.

Proof of concept Beacon Object File (BOF) that uses static x64 syscalls to perform a complete in memory dump of a process and send that back through your already existing Beacon communication channel