#1Adversary simulation, red team infrastructure, C2 frameworks, and operational security tools.
Kitploit recommended

Extracting Clear Text Passwords from mstsc.exe using API Hooking.

This map lists the essential techniques to bypass anti-virus and EDR

An experimentation and research platform to investigate the interaction of automated agents in an abstract simulated network environments.

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

PowerShell wrapper bundling 50+ C# offensive security tools for post-exploitation, privilege escalation, credential dumping, lateral movement, and…

AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK…

generate CobaltStrike's cross-platform payload

Extract Windows credentials directly from VM memory snapshots and virtual disks

A workshop about Malware Development

Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.

venom - C2 shellcode generator/compiler/handler

Polymorphic C2 profile generator for Cobalt Strike that automates creation of evasive beacon configurations with randomized options for HTTP, DNS,…

Collection of Offensive C# Tooling

Powershell tool to automate Active Directory enumeration.

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis…