Highlights
- Pro
Stars
Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from modern Chromium-based and Gecko-based browsers …
This project is aimed at freely providing technical guides on various hacking topics.
Cobalt Strike BOF for beacon/shellcode injection using fork & run technique with Draugr synthetic stack frames
bitpixie Proof of Concept - Bitlocker Decryptor
BloodyAD is an Active Directory Privilege Escalation Framework
A secure sandbox environment for malware developers and red teamers to test payloads against detection mechanisms before deployment. Integrates with LLM agents via MCP for enhanced analysis capabil…
SharpSuccessor is a .NET Proof of Concept (POC) for fully weaponizing Yuval Gordon’s (@YuG0rd) BadSuccessor attack from Akamai.
Tunnel all your traffic over Websocket or HTTP2 - Bypass firewalls/DPI - Static binary available
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
FindUncommonShares is a Python script allowing to quickly find uncommon shares in vast Windows Domains, and filter by READ or WRITE accesses.
zimedev / certipy-merged
Forked from ly4k/CertipyTool for Active Directory Certificate Services enumeration and abuse
A command and control framework written in rust.
A PowerShell script to perform PKINIT authentication with the Windows API from a non domain-joined machine.
Leverage a legitimate WFP callout driver to prevent EDR agents from sending telemetry
A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.
Dumping LSA secrets: a story about task decorrelation
Script collection for reconnaissance, post-exploitation & hunting on Windows networks
Offensive tool for Active Directory reconnaissance