Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework

GO Simple Tunnel - a simple tunnel written in golang

Enhanced version of secretsdump.py from Impacket. Adds multi-threading and accepts an input file with a list of target hosts for simultaneous secrets extraction.

Porting of mimikatz sekurlsa::logonpasswords, sekurlsa::ekeys and lsadump::dcsync commands

Escalate Service Account To LocalSystem via Kerberos

Google Calendar RAT is a PoC of Command&Control over Google Calendar Events

Computer object takeover through Resource-Based Constrained Delegation (msDS-AllowedToActOnBehalfOfOtherIdentity)

From an account member of the group Backup Operators to Domain Admin without RDP or WinRM on the Domain Controller

retrieve information via O365 and AzureAD with a valid cred

A tool for checking if MFA is enabled on multiple Microsoft Services

域信息收集工具

Harvest passwords automatically from OpenSSH server

DCSync Attack from Outside using Impacket

a unique framework for cybersecurity simulation and red teaming operations, windows auditing for newer vulnerabilities, misconfigurations and privilege escalations attacks, replicate the tactics an…

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

Tunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled environments.

Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019

A fast TCP/UDP tunnel over HTTP

Azure JWT Token Manipulation Toolset

Azure Outlook Command & Control (C2) - Remotely control a compromised Windows Device from your Outlook mailbox. Threat Emulation Tool for North Korean APT InkySquid / ScarCruft / APT37. TTP: Use Mi…

A Bypass Anti-virus Software Lateral Movement Command Execution Tool

Modify version of impacket wmiexec.py, get output(data,response) from registry, don't need SMB connection, also bypassing antivirus-software in lateral movement like WMIHACKER.

A high performance http-socks tunnel