Matt Creel

RITM. Roast in the Middle

SQL-BOF. Library of BOFs to interact with SQL servers

spraycharles. Low and slow password spraying tool, designed to spray on an interval over a long period of time

PySQLRecon. Offensive MSSQL toolkit written in Python, based off SQLRecon

aesKrbKeyGen. Generate AES128/256 Kerberos keys for an AD account using a plaintext password and Python3

pyldapsearch. Tool for issuing manual LDAP queries which offers bofhound compatible output

badger-builder. badger-builder is an AI-assisted tool for generating dynamic Brute Ratel C4 profiles

SharpInjector. Flexible C# shellcode runner

redteamtl. Dockerized nginx app used to create high-level timeline visuals for red team assessments

list-wam-accounts. List web account manager (WAM) accounts added to the current profile

impacket. Impacket is a collection of Python classes for working with network protocols.

nessporter. Assists in mass exportation of Nessus scans

HTTPS-MalleableC2-Config. Create Cobalt Strike malleable C2 profiles with HTTPS configs

namedaddy. Quickly manage DNS records for domains owned within GoDaddy, Namecheap and Route53

tscheduler. Use Impacket's MS-TSCH implementation to remotely manage scheduled tasks

nessmerger. Merge multiple .nessus files into a single .xlsx formatted report

LinkedInRecon. Gathers a given company's employees from LinkedIn

Poetry-Template. Template Repo for Future Projects

cuddlephish. Weaponized Browser-in-the-Middle (BitM) for Penetration Testers

cookie-monster. BOF to steal browser cookies & credentials

CrackMapExec. A swiss army knife for pentesting networks

sccmhunter. Python

CS-Situational-Awareness-BOF. Situational Awareness commands implemented using Beacon Object Files

CS-Remote-OPs-BOF. C

SQLRecon. A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

PerfExec. C#

File-Smuggling. HTML smuggling is not an evil, it can be useful