AdaptixFramework Extension Kit

Encode and Fuzz Custom Protobuf Messages in Burp Suite

An advanced [Finder | Checker | Server] tool for proxy servers, supporting both HTTP(S) and SOCKS protocols. 🎭

BOF for Kerberos abuse (an implementation of some important features of the Rubeus).

A local privilege escalation vulnerability in VMware vCenter Server (and VMware Cloud Foundation) caused by a misconfiguration of sudo, allowing an authenticated user with non-administrative privil…

Tool designed to find folder exclusions using Windows Defender using command line utility MpCmdRun.exe as a low privileged user, without relying on event logs

.NET post-exploitation toolkit for Active Directory reconnaissance and exploitation

Python implementation of GhostPack's Seatbelt situational awareness tool

An archive of 0day.today exploits

A BOF that's a BOF Loader

Golang Automation Framework for Cobalt Strike using the Rest API

Collection of many ldap bofs for domain enumeration and privilege escalation. Created for use with the Adaptix C2.

Proof-of-Concept tool for extracting NTLMv1 hashes from sessions on modern Windows systems.

Attempt at Obfuscated version of SharpCollection

Inject .NET assemblies into an existing process

Collection of Beacon Object Files (BOF) for Cobalt Strike

InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditiona…

List of Awesome CobaltStrike Resources

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

Creating a repository with all public Beacon Object Files (BoFs)

内网资产收集、探测主机存活、端口扫描、域控定位、文件搜索、各种服务爆破（SSH、SMB、MsSQL等）、Socks代理，一键自动化+无文件落地扫描

XGao免杀工具可绕过国内常见杀毒，持续更新，请多多关注

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

Active Directory certificate abuse.

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

自动化检测 Swagger API 接口未授权访问漏洞工具

A tool that helps you find the real IP addresses hiding behind Cloudflare by checking subdomains.