Hashcat module that can crack a password used to derive an AES-128 key with CryptDeriveKey from CryptoAPI

linikatz is a tool to attack AD on UNIX

Tool for Active Directory Certificate Services enumeration and abuse

Shikata ga nai (仕方がない) encoder ported into go with several improvements

C# Lsass parser

Hashcat module that can crack a password used to derive an AES-128 key with CryptDeriveKey from CryptoAPI

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

A Python based ingestor for BloodHound

tgtdelegation is a Beacon Object File (BOF) to obtain a usable TGT via the "TGT delegation trick"

The Elevate Kit demonstrates how to use third-party privilege escalation attacks with Cobalt Strike's Beacon payload.

PoC Ransomware with Coinbase Commerce integration built on C# .NET Framework (console) and PHP

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

A mostly-serverless distributed hash cracking platform

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

An open-source, free protector for .NET applications

InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditiona…

This publication is a collection of various common attack scenarios on Azure Active Directory and how they can be mitigated or detected.

C# implementation of harmj0y's PowerView

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

Fork of mona.py with x64dbg support

Root-Me Badge Generator is a web application that generates badges from Root-me profiles. - https://status.duboc.xyz/status/rootme-badge-generator

PS3 emulator/debugger

Deep learning, architecture and hyper parameters search with genetic algorithms

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

MySQL fake server for read files of connected clients