SMBLoot is a terminal interface for browsing SMB shares, reading remote files, downloading and uploading files, and recursively inspecting remote directory trees.

Raw NTFS volume oracle: locked-file read and offline SAM hashes without LSASS

HVNC for Cobalt Strike

Kyocera cred dumper based on CVE-2022-1026

Havoc C2 BOF port of the KslD.sys BYOVD technique. Credential extraction from lsass via physical memory — no OpenProcess, no auditable API calls.

IoT Inspector: capturing and analyzing your smart home network traffic

Entra ID user enumeration and auth method discovery via the public GetCredentialType API

Stealth Windows keylogger.

Links from X Posts

Bug bounty focused JavaScript security analysis for crawling web assets, source maps, and secret discovery

Fritter is a heavily modified fork of TheWover and Odzhan's Donut shellcode generator.

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

Matkap - hunt down malicious Telegram bots

PC 端语音输入工具，离线识别，高准确率、低延迟，支持热词、LLM润色。按住CapsLock或鼠标侧键X2说话，松开自动上屏。

Transforms complex documents like PDFs and Office docs into LLM-ready markdown/JSON for your Agentic workflows.

Initial Access and Post-Exploitation Tool for Entra ID and M365 with a browser-based GUI

A list of useful Powershell scripts with 100% AV bypass (At the time of publication).

Stealth headless browser for AI agents — bypass Cloudflare, bot detection, and anti-scraping. Drop-in Puppeteer/Playwright replacement.

Research into Undocumented Behavior of Azure AD Refresh Tokens

用于 FOFA 高级语法查询的桌面图形化（GUI）工作台

dev tools, env vars, task runner

Fully automatic censorship removal for language models

Mobile and Web client for Codex and Claude Code, with realtime voice, encryption and fully featured

Obfusk8: lightweight Obfuscation library based on C++17 / Header Only for windows binaries

后渗透信息/密码/凭证收集工具

A collection of all the data i could extract from 1 billion leaked credentials from internet.

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.

Proxy system that routes traffic through Cloudflare Workers for IP rotation and anonymity

Beacon Object File (BOF) port of DumpGuard for extracting NTLMv1 hashes from sessions on modern Windows systems.