backup_dc_registry
horizon3ai/backup_dc_registryA simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY
exploitationlateral-movementmisconfiguration+3
96
horizon3ai/backup_dc_registryA simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY
nccgroup/chuckleAn automated SMB relay exploitation script.
nullsection/chisel-ngChisel new generation, written in rust. SSH under WSS with some customization.
0x4d31/honeybitsA PoC tool designed to enhance the effectiveness of your traps by spreading breadcrumbs & honeytokens across your systems to lure the attacker toward…
k8gege/pyladonLadon Scanner For Python, Large Network Penetration Scanner & Cobalt Strike, vulnerability / exploit / detection /…
shadow1ng/fscan一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
k8gege/k8toolsK8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell…
k8gege/ladonLadon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。网络资产探测32…
beetlechunks/spoolsploitA collection of Windows print spooler exploits containerized with other utilities for practical exploitation.
megamansec/ssh-snakeSSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.
rapid7/metasploit-frameworkOpen-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…
fortra/impacketPython library for low-level network protocol manipulation, featuring SMB, MSRPC, Kerberos, and WMI implementations with tools for authentication…
hacktricks-wiki/hacktricksWelcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
infosecn1nja/red-teaming-toolkitThis repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.
a-poc/redteam-toolsTools and Techniques for Red Team / Penetration Testing
s1ckb0y1337/active-directory-exploitation-cheat-sheetA cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
specterops/bloodhound-legacySix Degrees of Domain Admin
pennyw0rth/netexecPost-exploitation framework for automated network authentication testing, credential harvesting, and lateral movement across Windows/AD environments…