⚡ The most powerful open source tweaker on GitHub for fine-tuning Windows 10 & Windows 11

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

A Powershell incident response framework

CobaltStrike后渗透测试插件

A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.

Dominate Active Directory with PowerShell.

My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+

Random Tools

Aggressor Script, Kits, Malleable C2 Profiles, External C2 and so on

Active Directory Auditing and Enumeration

getsystem via parent process using ps1 & embeded c#

A collection of various vulnerable (mostly physical memory exposing) drivers.

Patch termsrv.dll so that multiple remote users can open an RDP session on a non-Windows Server computer

Invoke-ArgFuscator is an open-source, cross-platform PowerShell module that helps generate obfuscated command-lines for common system-native executables.

Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) SMB shares

Bridge your WSL instance onto to your network

Research on WDEG (Windows Defender Exploit Guard) and its components.