Domain Password Audit Tool for Pentesters

A multithreaded bruteforcer of argon2 hashes.

Credentials recovery project

Python script that converts Grafana hash digests to PBKDF2_HMAC_SHA256 format in order to facilitate password cracking using Hashcat.

A python tool to automate KeePass discovery and secret extraction.

game of active directory

Python alternative to Mimikatz lsadump::dcshadow

In-depth ldap enumeration utility

DPAPI looting remotely and locally in Python

Dumping DPAPI credz remotely

The Network Execution Tool

CVE-2021-40444 PoC

POC for CVE-2024-36991: This exploit will attempt to read Splunk /etc/passwd file.

My cheatsheet notes to pentest AWS infrastructure

Active Directory data ingestor for BloodHound Community Edition written in Rust. 🦀

SeImpersonate privilege escalation tool for Windows 8 - 11 and Windows Server 2012 - 2022 with extensive PowerShell and .NET reflection support.

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

Hashicorp Consul - RCE via Services API

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures.

Bridge the gap between your Markdown notes and your SysReptor report findings

Exploit for Grafana arbitrary file-read and RCE (CVE-2024-9264)

A light-weight first-stage C2 implant written in Nim (and Rust).

Minima is a one-size-fits-all Jekyll theme for writers.

Official writeups for Cyber Apocalypse CTF 2025: Tales from Eldoria

A tool to query for the existence of pre-windows 2000 computer objects.

Jekyll plugin providing a glossary liquid tag that will show a tooltip of a term definition.

Rest Server is a high performance HTTP server that implements restic's REST backend API.

Six Degrees of Domain Admin