Stars
Conquest is a feature-rich and malleable command & control/post-exploitation framework developed in Nim.
A python tool to map the access rights of network shares into a BloodHound OpenGraphs easily
The fastest and more comprehensive multiprotocol credentials bruteforcer / password sprayer and enumerator. 🥷
Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) SMB shares
Unauthenticated Remote Code Execution via unsafe deserialization in Microsoft SharePoint Server (CVE-2025-53770)
A deliberately vulnerable Microsoft Entra ID environment. Learn identity security through hands-on, realistic attack challenges.
Tunnel all your traffic over Websocket or HTTP2 - Bypass firewalls/DPI - Static binary available
Tunnel (TUN) interface for SOCKS and HTTP proxies
EDR-Freeze is a tool that puts a process of EDR, AntiMalware into a coma state.
Search plugins to use with qBittorrent
Group Policy Objects manipulation and exploitation framework
yams: Yet Another Media Server. My personal media server, easy to install in a bash script. This repository is a mirror, original one in https://git.rogs.me/rogs/yams
A tool to transform Chromium browsers into a C2 Implant
This project upgrades a Gaggia espresso machine with smart controls to improve your coffee-making experience. By adding a display and custom electronics, you can monitor and control the machine mor…
Username enumeration and password spraying tool aimed at Microsoft O365.
A tool for checking if MFA is enabled on multiple Microsoft Services
Beacon Object File (BOF) to obtain Entra tokens via authcode flow.
TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!
🏋 Modern open-source fitness coaching platform. Create workout plans, track progress, and access a comprehensive exercise database.
PoC Exploit for the NTLM reflection SMB flaw.
Open source project that searches OSRS/RS3 Hiscores for availability of a RSN.
This is a collection of some of mine mindmaps abount pentesting created with Obsidian.