


Windows绕过EDR实现DumpHash

Creation of multiple Malware tools consisting of evasion, enumeration and exploitation

A modular Python application to pull intelligence about malicious files

A malware analysis and classification tool.

Web Application Vulnerability Scanner

Collection of Brute Ratel C4 BOFs for Windows post-exploitation: process memory access, NetNTLMv2 hash retrieval, contact harvesting, and…

KrbRoastParser is a tool for parsing Kerberos packets from pcap files to extract AS-REQ, AS-REP and TGS-REP hashes

Crack MSCHAPv2 challenge/responses quickly using a database of NT hashes

Bash tool for on-foot Wi-Fi security checks in a loop, with evidence reports. (re-invented wifi WarDriving)

Powershell module to get the NetNTLMv2 hash of the current user

A comprehensive Python-based security tool for file scanning, malware detection, and analysis in an ever-evolving cyber landscape.

Grab NetNTLMv2 hashes using ETW with administrative rights on Windows 8.1 / Windows Server 2016 and later

C# version of NTLMRawUnHide

Drop any Windows DPAPI artifact and it identifies the format and the exact master key it needs, then decrypts once you supply the key. Offline, CLI +…

Offset Independent Credential Extraction Tool


A Pythonic interface and command line tool for interacting with the InQuest Labs API.