a strictly RFC 4510 conforming LDAP V3 pure Python client. The same codebase works with Python 2. Python 3, PyPy and PyPy3

JavaScript payload and supporting software to be used as XSS payload or post exploitation implant to monitor users as they use the targeted application. Also includes a C2 for executing custom Java…

A PowerShell tool that takes strong inspiration from CrackMapExec / NetExec

🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

User enumeration and password bruteforce on Azure, ADFS, OWA, O365, Teams and gather emails on Linkedin

A service that waits for security notices from wid.cert-bund.de and wid.lsi.bayern.de and sends configurable email notifications

Enumerate and disable common sources of telemetry used by AV/EDR.

Escalate Service Account To LocalSystem via Kerberos

reverse shell using curl

A centralized resource for previously documented WDAC bypass techniques

#cheat sheet for OSCP

HiddenVM — Use any desktop OS without leaving a trace.

A Repository to Track Anti-Forensic Techniques

DirSync is a simple proof of concept PowerShell module to demonstrate the impact of delegating DS-Replication-Get-Changes and DS-Replication-Get-Changes-In-Filtered-Set.

BGP reverse proxy and firewall

A tool to Impersonate logged on users without touching LSASS (Including non-Interactive sessions).

Live memory analysis detecting malware IOCs in processes, modules, handles, tokens, threads, .NET assemblies, memory address space and environment variables. Dumps, detects and dissasemble hooks, s…

Real fucking shellcode encryptor & obfuscator tool

Linux Kernel Defence Map shows the relationships between vulnerability classes, exploitation techniques, bug detection mechanisms, and defence technologies

A tool for checking the security hardening options of the Linux kernel

DebugAmsi is another way to bypass AMSI through the Windows process debugger mechanism.

Multiplatform reverse shell generator

Pass-thru web server for traffic redirection

Analyse your malware to surgically obfuscate it

Dangerously fast DNS/network/port scanner

Simple shellcode injection in Nim encrypted in XOR

A flexible tool for redirecting a given program's TCP traffic to SOCKS5 or HTTP proxy.

A tool to generate a wordlist from the information present in LDAP, in order to crack passwords of domain accounts.

Microsoft SharePoint Server Elevation of Privilege Vulnerability