Highlights
- Pro
Stars
NTLM HTTP relay tool with SOCKS proxy for browser session hijacking
A wordlist of API names for web application assessments
abusing windows toast notifications for fun and user manipulation
An agentic skills framework & software development methodology that works.
Dominate the domain. Relay to royalty.
Realm is a cross platform Red Team engagement platform with a focus on automation and reliability.
A TTS that fits in your CPU (and pocket)
A modern 32/64-bit position independent implant template
Open-source offensive security platform for conducting phishing campaigns that weaponizes iCalendar automatic event processing.
LLMON 🍋 - The World's First Web Adversarial AI Firewall
MCP Server for Cobalt Strike interaction.
Python and BOF utilites to the determine EPA enforcement levels of popular NTLM relay targets from the offensive perspective
Proxifier Alternative to redirect any Windows/MacOS/Linux TCP and UDP traffic to HTTP/Socks5 proxy
blurbdust / PXEThief
Forked from MWR-CyberSec/PXEThiefPXEThief is a set of tooling that can extract passwords from the Operating System Deployment functionality in Microsoft Endpoint Configuration Manager
An Ansible role for installing Cobalt Strike.
gpoParser is a tool designed to extract and analyze configurations applied through Group Policy Objects (GPOs) in an Active Directory environment.
POC tool to abuse windows server failover clusters
C2 Agent fully PIC for Mythic with advanced evasion capabilities, dotnet/powershell/shellcode/bof memory executions, lateral moviments, pivot and more.
BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions
A small collection of Crystal Palace PIC loaders designed for use with Cobalt Strike
Coerce Windows authentication by generating, distributing, and cleaning up poisoned files at scale.
AdaptixC2 is a highly modular advanced redteam toolkit
Python3 utility for creating zip files that smuggle additional data for later extraction
Beacon Object File (BOF) to obtain Entra tokens via authcode flow.