
SharpMove
.NET Project for performing Authenticated Remote Execution

.NET Project for performing Authenticated Remote Execution

BOF POC of the DSCourier project / invoking WinGet via COM

An AI-powered agentic red team framework that automates offensive security operations, from reconnaissance to exploitation to post-exploitation, with…

Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

An information security preparedness tool to do adversarial simulation.

AV/EDR processes termination by exploiting a vulnerable driver (BYOVD)

Elite is the client-side component of the Covenant project. Covenant is a .NET command and control framework that aims to highlight the attack…

Threat intelligence and incident response case study on LockBit ransomware exploiting CVE-2023-4966 (Citrix Bleed).

A Bypass Anti-virus Software Lateral Movement Command Execution Tool

Asynchronous RDP client for Python (headless)

Offline AD/Entra attack-path analyzer for SharpHound/AzureHound JSON. Surfaces prioritized privilege escalation, credential, and misconfiguration…

Check-LocalAdminHash is a PowerShell tool that attempts to authenticate to multiple hosts over either WMI or SMB using a password hash to determine…

DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely

Project that brings together several pentest tools

PoC malware that uses exploit CVE-2021-36934 (improper ACLs on shadow copies) using a fileless red team method on Windows 10/11 with LOLBins,…

a unique framework for cybersecurity simulation and red teaming operations, windows auditing for newer vulnerabilities, misconfigurations and…

Harvests NetNTLM hashes in Windows domains via a local WebDAV server, with LNK file poisoning and Office document field code injection for lateral…

The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning