
Overthrone
All-Rust Active Directory exploitation framework: LDAP/SMB/Kerberos enumeration, attack-graph pathfinding, Kerberoasting, NTLM relay, ticket forging,…

All-Rust Active Directory exploitation framework: LDAP/SMB/Kerberos enumeration, attack-graph pathfinding, Kerberoasting, NTLM relay, ticket forging,…

110 offensive-security one-liners for authorized testing and CTFs, grouped by category and kill-chain step.

Infect Shared Files In Memory for Lateral Movement

Insecure TeamCity CI environment for hands-on penetration testing training: reconnaissance, credential theft, privilege escalation, and lateral…

Hijacking valid driver services to load arbitrary (signed) drivers abusing native symbolic links and NT paths

POCs for CVE-2025-50154 and CVE-2025-59214, zero day vulnerabilities on windows file explorer disclosing NTLMv2-SSP without user interaction. It is a…

New 0 day vulnerability allowing to leak NTLM hashes from browsers with one click

If you've been grinding through HackTheBox machines, Mailing is one of those boxes that genuinely teaches you something. It's rated Easy, runs on…

CVE-2022-30190 | MS-MSDT Follina One Click

This tool can be used during internal penetration testing to dump Windows credentials from an already-compromised host. It allows one to dump SYSTEM,…

A C# tool with more flexibility to customize scheduled task for both persistence and lateral movement in red team operation

TCP Port Redirection Utility

Get file less command execution for lateral movement.