Tools

nccgroup/fenrir

PoC to tunnel the Meterpreter reverse HTTP shell over RDP Virtual Channels

zux0x3a/tchopper

conduct lateral movement attack by leveraging unfiltered services display name to smuggle binaries as chunks into the target machine

cheshireca7/smbautorelay

SMB Auto Relay provides the automation of SMB/NTLM Relay technique for pentesting and red teaming exercises in active directory environments.

nccgroup/whowasi

Impersonate Logged In Accounts & Execute Commands

pinoywh1z/ssh-private-key-looting-wordlists

Curated wordlists for brute-forcing SSH private key filenames, aiding penetration testers in locating keys via LFI or enumeration during lateral…

marcorosa/cnc-botnet-in-python

C&C Botnet written in Python with fabric

e-fin/pypspipejack

Python implementation of OpenPsPipeJack

horizon3ai/ivanti-epm-coercion-vulnerabilities

Proof of concept exploit for Ivanti EPM CVE-2024-13159 and others

tc4dy/cve-2026-6875-poc-exploit

CVE-2026-6875 ServiceNow Pre-Auth RCE Framework 🔥 JS Injection → Sandbox Escape → RCE → Root. Features: --detect, --exec, reverse/interactive shell,…

al1ex/pstools

PSTools

synacktiv/gpblib

Common library for tools implementing GPO attack vectors

al1ex/makemeenterpriseadmin

MakeMeEnterpriseAdmin

al1ex/invoke-dcsync

Invoke-DCSync

comparedarray/printix-cve-2022-29551

A "Exposed Dangerous Method or Function" vulnerability in PrintixService.exe, in Kofax Printix's "Printix Secure Cloud Print Management", Version…