SCCMHunter is a post-ex tool built to streamline identifying, profiling, and attacking SCCM related assets in an Active Directory domain.

A simple research-focused AES-based shellcode loader demonstrating in-memory execution and NTAPI techniques to help understand how custom loaders can bypass Windows Defender–based detection.

A tool to abuse Exchange services

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It ca…

.NET DllExport with .NET Core support (aka 3F/DllExport aka DllExport.bat)

Defeating Windows User Account Control

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

Another Windows Local Privilege Escalation from Service Account to System

📙 Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report

micr0shell is a Python script that dynamically generates Windows X64 PIC Null-Free reverse shell shellcode.

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.

A PoC for the dMSA Active Directory Domain Takeover deemed BadSuccessor

Decrypt Chromium based browser passwords with PowerShell.

Impack-only implementation of WinRM protocol with support for NTLM and Kerberos auth

Advanced Domain Controller attack and credential analysis tool leveraging DonPAPI database

Execute commands interactively on remote Windows machines using the WinRM protocol

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 9…

Advanced Active Directory network topology analyzer with SMB validation, multiple authentication methods (password/NTLM/Kerberos), and comprehensive network discovery. Export results as BloodHound‑…

New generation of wmiexec.py

SeImpersonate privilege escalation tool for Windows 8 - 11 and Windows Server 2012 - 2022 with extensive PowerShell and .NET reflection support.

Trying to tame the three-headed dog.

Windows Exploit Suggester - Next Generation

several list of simple and obfuscate PHP shell

Common PHP webshells you might need for your Penetration Testing assignments or CTF challenges. Do not host the file(s) on your server!

Remote DLL Injection with Timer-based Shellcode Execution