An AI-powered agentic red team framework that automates offensive security operations, from reconnaissance to exploitation to post-exploitation, with zero human intervention.

SOCKS5 proxy tool that uses Azure Storage services as a means of communication.

io_uring based rootkit

Dig your way out of networks like a Meerkat using SSH tunnels via ClickOnce.

A tool to query for the existence of pre-windows 2000 computer objects.

JavaScript beacons and C2 to be used for XSS payload or post exploitation implants on webapp servers or desktop software to monitor users and maintain persistence. Browser extension, electron app, …

peeko – Browser-based XSS C2 for stealthy internal network exploration via infected browser.

Browser streaming MITM proxy

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

Find potential DLL Sideloads on your windows computer

Detect common NFS server misconfigurations

smugglo - an easy to use script for wrapping files into self-dropping HTML payloads to bypass content filters

A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.

expose yourself

A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive analysis end to end.

Enumerate information from NTLM authentication enabled web endpoints 🔎

A tool for performing light brute-forcing of HTTP servers to identify commonly accessible NTLM authentication endpoints.

LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping

WifiForge is a tool developed by Black Hills InfoSec to help train Pentesters on different Wi-Fi attack vectors and Wireless capabilities.

Invoke-ArgFuscator is an open-source, cross-platform PowerShell module that helps generate obfuscated command-lines for common system-native executables.

Bitor Scanning Software

A suite of services (SOCKS, FTP, shell, etc.) over Citrix, VMware Horizon and native Windows RDP virtual channels.

A blazing fast, high performance implementation of AutoRecon in Rust. A multi-threaded network reconnaissance tool which performs automated enumeration of services 🦀 🔥

Multilayered AV/EDR Evasion Framework (no longer actively maintained)

A delicious, but malicious SSL-VPN server 🌮

Tools for controlling webcam LED on ThinkPad X230

Penelope Shell Handler

game of active directory (SnapLabs version)