r0BIT

RoguePlanet. RoguePlanet Windows Defender Vulnerability

Hecate. A modern alternative Web-UI for the Mythic Command and Control Server

vmkit. A header-only, freestanding C++20 template for IR-bytecode VM loaders

Whisker. Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account.

OpenHound. Python

paexec-py. psexec-like remote execution using the paexec wire protocol that supports paexec and remoteexecm2 from manageengine adselfservice plus

VPK. Vast.ai Password Kracking

Erebus. Erebus is an Initial Access wrapper for the Mythic Command & Control Server. It converts shellcode into payloads specifically used for phishing and IA operations.

fsquirt_loader. C

smbcrawler. smbcrawler is no-nonsense tool that takes credentials and a list of hosts and 'crawls' (or 'spiders') through those shares

bhcli. CLI tool to interact with the BloodHound CE API

PowerHub. A post exploitation tool based on a web application, focusing on bypassing endpoint protection and application whitelisting

DumpGuard. Proof-of-Concept tool for extracting credential material from protected sessions on modern Windows systems.

BloodHound. Six Degrees of Domain Admin

remoteKrbRelayx. A tool for coercing and relaying Kerberos authentication over DCOM and RPC.

HoundTrainer. A tool for managing custom node types and Cypher queries in BloodHound

ludus-rangecraft. A collection of my personal Ludus configs, custom roles, and environment setups.

FEX. A fast usermode x86 and x86-64 emulator for Arm64 Linux

dpapi-projects. DPAPI research and offensive tools

NetExec. The Network Execution Tool

MaldevAdventures. A collection repo for my journey of learning malware development. It involves implementing PoCs, techniques and other interesting things.

printerbugnew. The DCERPC only printerbug.py version

Crystal-Kit. Evasion kit for Cobalt Strike

AdaptixC2. AdaptixC2 is a highly modular advanced redteam toolkit

OperatorsKit. Collection of Beacon Object Files (BOF) for Cobalt Strike

C2-Tool-Collection. A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

ShareHound. A python tool to map the access rights of network shares into a BloodHound OpenGraphs easily

shareql. A domain specific language for matching directories and files in network shares

UnderlayCopy. PowerShell toolkit that extracts locked Windows files (SAM, SYSTEM, NTDS, ...) using MFT parsing and raw disk reads

Vulnacle. A deliberately misconfigured database training appliance

Extension-Kit. AdaptixFramework Extension Kit

goexec. Windows remote execution multitool

SQL-BOF. Library of BOFs to interact with SQL servers

sekken-enum. adws enumeration bof