aniket2912/internal-network-penetration-testingEducational module on internal network penetration testing: methodology, attack vectors, enumeration, exploitation, privilege escalation, and…
dagowda/confluencec2This is a project aimed to make every other Saas product a C2, confluence is just the beginning.
kr0no/bloodhound-shellAn interactive command-line shell for BloodHound API.
kypvas/ad_attack_architectureActive Directory Attack Architecture Map Comprehensive Pentest Reference — From Recon to Domain Dominance
kypvas/red-team-mapRed Team Operations Architecture Map Comprehensive Operator Reference — From Infrastructure to Impact
abraxas/veneficus-implant-publicSpicy malware 0day. Full kill-chain malware: exploit, pivot, c2, persistence. Rust converted to pseudo-code - if you're smart you can build it…
abraxas/veneficusSuper elite end-to-end implant 0day. Full kill-chain. Exploit, escalate, pivot, poison, persistence.
mythicagents/xenonA Mythic agent for Windows written in C
stillbigjosh/kube-reaperScans Kubernetes clusters from any identity, flags dangerous permissions, and chains them into multi-step escalation paths to cluster compromise.
shadowforge-cyber/cve-2026-65660-pocMalicious Register Directive Code Injection Exploit
hac01/azure-pentesting-suiteGo toolkit for authorized Azure security assessments: enumerates subscriptions and resources, audits misconfigurations, and attacks public Blob…
wattocyber/oscp-notes-2026OSCP notes vault + exam cockpit dashboard: merged technique notes, variable-filled command decks, machines, creds, and runbook for exam day. MIT.
bc-security/empireEmpire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
morrubin/negoexrelayRelays NegoEx/PKU2U Kerberos authentication to arbitrary targets, enabling credentialless authentication, command execution, SMB hash dumping, and…
flangvik/sharpcollectionNightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps…
b23r0/heroinnA cross platform C2/post-exploitation framework.
secureworks/tokenmanPost-exploitation toolkit for Azure AD: fetch/search Microsoft Graph data, swap FOCI refresh tokens, and generate Azure CLI auth files from tokens.
icyguider/moreimpacketexamplesMore examples using the Impacket library designed for learning purposes.
