A sock, with a wire, so you can tunnel all you desire.

Tool for Active Directory Certificate Services enumeration and abuse

Read Registry.pol files on Linux, or anywhere Python runs!

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

Read-only mirror of Wireshark's Git repository at https://gitlab.com/wireshark/wireshark. ⚠️ GitHub won't let us disable pull requests. ⚠️ THEY WILL BE IGNORED HERE ⚠️ Upload them at GitLab instead.

Idapython script to carve binary for internal RPC structures

Check for LDAP protections regarding the relay of NTLM authentication

The Havoc Framework.

Six Degrees of Domain Admin

Bash script to build a custom LineageOS Kernel without having to download unnecessary source code.

An all-in-one Cobalt Strike BOF to patch, check and revert AMSI and ETW for x64 process. Both syscalls and dynamic resolve versions are available.

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

Common library used by SharpHound.

Situational Awareness commands implemented using Beacon Object Files

The collection automates the management and provisioning of infrastructure as code (IaC) using the Terraform CLI tool within Ansible playbooks and Execution Environment runtimes.

Partial python implementation of SharpGPOAbuse

a strictly RFC 4510 conforming LDAP V3 pure Python client. The same codebase works with Python 2. Python 3, PyPy and PyPy3

The swiss army knife of LSASS dumping

A swiss army knife for pentesting networks

SOCKS4, SOCKS4a and SOCKS5 proxy server in Go

HVNC for Cobalt Strike

Save your dotfiles once, deploy them everywhere