CVE-2013-4786 Go exploitation tool

Active Directory post exploitation kit for security purposes

Your template-based BloodHound terminal companion tool

Useful ChatGPT prompts for offensive security work

StoneKeeper C2, an experimental EDR evasion framework for research purposes

CVE-2024-5764 exploitation script

CVE-2024-4956 Python exploitation utility

Shannon's Entropy calculator in Rust

Python utility for extracting Apache Shiro 1 hashes from OrientDB files

Tools that were used during the development of the Apache Shiro 1 Hashcat module

evilginx3 + gophish

Heavily obfuscated ASP web shell generation tool.

DLL proxy load example using the Windows thread pool API, I/O completion callback with named pipes, and C++/assembly

Work, timer, and wait callback example using solely Native Windows APIs.

Enhanced version of secretsdump.py from Impacket. Adds multi-threading and accepts an input file with a list of target hosts for simultaneous secrets extraction.

A bash script for parsing JSON files from ldapdomaindump, extracting and printing computer DNS names or user names to stdout.

A Python tool for detecting local admin password reuse across SAM files in an Active Directory environment, with support for user blacklisting and optional Excel reporting.

Simple PoC to locate hooked functions by EDR in ntdll.dll