khaos-c2
28zaaky/khaos-c2KHAOS is a modern C2 framework that routes agent traffic through cloud services already trusted by enterprise networks.
command-and-controllateral-movementpayload-development+5
28zaaky/khaos-c2KHAOS is a modern C2 framework that routes agent traffic through cloud services already trusted by enterprise networks.
portbuster1337/atlasCross-platform network execution toolkit (SMB/Kerberos/WMI/LDAP/DCSync) built on TrustedSec's Titanis - NetExec-style workflow in C#
synacktiv/gpblibCommon library for tools implementing GPO attack vectors
ricardojoserf/autopttAutomated Pass-the-Ticket (PtT) attack. Standalone alternative to Rubeus and Mimikatz for this attack. In C#, C++, Crystal, Python, Rust, Golang, Nim…
synacktiv/kcmdumpDump Kerberos tickets from the KCM database of SSSD
synacktiv/ounedThe OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning
jonyfilc/printspoofer-reflectivedllThe Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040/CVE-2019-1019) has been implemented as a Reflective DLL for penetration…
cybiere/baboosshSSH spreading made easy for red teams in a hurry
e-fin/pypspipejackPython implementation of OpenPsPipeJack
0xthirteen/sharprdpRemote Desktop Protocol .NET Console Application for Authenticated Command Execution
jakobfriedl/tgt-monitor-bofAsync BOF to automatically extract or renew Kerberos TGTs on a target system.
tc4dy/cve-2026-6875-poc-exploitCVE-2026-6875 ServiceNow Pre-Auth RCE Framework 🔥 JS Injection → Sandbox Escape → RCE → Root. Features: --detect, --exec, reverse/interactive shell,…
hackndo/pygpoabusePartial python implementation of SharpGPOAbuse
synacktiv/prox-ezHTTP/HTTPS interception proxy for testing Windows authentication mechanisms, supporting NTLM, Kerberos, pass-the-hash, pass-the-ticket and relay…
dhananjayasj/cve-2024-21413-microsoft-outlook-remote-code-execution-vulnerabilityProof-of-concept exploit for CVE-2024-21413, a critical Outlook RCE vulnerability that leaks NetNTLMv2 hashes via crafted file:// links, enabling…
abc1230940/soc336-windows-ole-zero-click-rce-exploitation-detected-cve-2025-21298SOC336 - Windows OLE Zero-Click RCE Exploitation Detected (CVE-2025-21298) Walkthrough
solarlynxsqueeze/cve-2026-32202Generates malicious LNK files to coerce Net-NTLMv2 hashes via Windows Shell UNC handling, with custom SMB listener and relay integration for…
0xndi/cve-2026-24294Local privilege escalation PoC for CVE-2026-24294, abusing SMB arbitrary port and NTLM reflection to achieve SYSTEM on Windows Server 2025.