Modern wireless security auditor with live Rich UI and smart attack orchestration

A sophisticated, covert Windows-based credential dumper using C++ and MASM x64.

Most advanced and poorly coded windows batch obfuscator ever made (aka the best)

A set of fully-undetectable process injection techniques abusing Windows Thread Pools

A tool that allows you to convert NMAP results to html, csv, json, markdown, graphviz (dot), sqlite, excel and d2-lang. Simply put it's nmap converter.

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

Active Directory and Internal Pentest Cheatsheets

Another Windows Local Privilege Escalation from Service Account to System

LPE exploit for CVE-2023-21768

Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime

Collection of PoC and offensive techniques used by the BlackArrow Red Team

Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.