s3cur3th1ssh1t/namedpipepthPass the Hash to a named pipe for token Impersonation
enkomio/alanframeworkA C2 post-exploitation framework
yaxser/cobaltstrike-bofCollection of beacon BOF written to learn windows and cobaltstrike
nccgroup/keimpxCheck for valid credentials across a network over SMB
xret2pwn/picklec2Encrypted C2 framework for post-exploitation and lateral movement, supporting PowerShell implants and custom modules for red team engagements.
med0x2e/sigflipSigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.
riccardoancarani/liquidsnakeFileless lateral movement tool using WMI Event Subscriptions to execute .NET assemblies in memory, with shellcode injection via named pipes for…
iomoath/sharpstrikeA Post exploitation tool written in C# uses either CIM or WMI to query remote systems.
beetlechunks/spoolsploitA collection of Windows print spooler exploits containerized with other utilities for practical exploitation.
iomoath/powershxRun Powershell without software restrictions.
kindtime/nosferatuDLL that hooks NTLM and Kerberos authentication in lsass.exe to inject a backdoor hash, enabling persistent authenticated access on Windows systems.
psmths/reaveWIP Post-exploitation framework tailored for hypervisors.
mgeeky/azurertAzureRT - A Powershell module implementing various Azure Red Team tactics
artusec/pivotoolBash-based post-exploitation tool for semi-automated network pivoting, enabling lateral movement through compromised systems during penetration tests.
cybiere/baboosshSSH spreading made easy for red teams in a hurry
nettitude/malsccmAbuse SCCM servers to deploy malicious applications to managed hosts for lateral movement and red team operations.