
maalik
Feature-rich Post Exploitation Framework with Network Pivoting capabilities.

Autonomous LLM red team agent that plans and executes full attack chains—recon, exploitation, privilege escalation, lateral movement and C2—inside an…

Active Directory reconnaissance and exploitation for Red Teams via the Active Directory Web Services (ADWS).

Windows RPC firewall that audits, detects, and blocks malicious remote procedure calls to prevent lateral movement, reconnaissance, and exploitation…

The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning

An automated SMB relay exploitation script.

Automates NTLM relay exploitation using ntlmrelayx.py for SMB share enumeration, shell execution, secrets dumping, and MSSQL command execution via…

Universal exploitation tool for CVE-2025-33073 targeting Windows Domain Controllers with DNSAdmins privileges and WinRM enabled.

Module-based AWS exploitation framework for red team testing and blue team analysis. Emulates attack patterns in the AWS control plane with unique UA…

Exploitation of CVE-2025-29969

Curated repository of CVEs with PoCs, articles, and detailed descriptions for vulnerability research and exploitation.

An exploitation demo of Outlook Elevation of Privilege Vulnerability

SharpSploit is a .NET post-exploitation library written in C#

Kerberos relay framework for Windows environments enabling authentication relay, privilege escalation, and lateral movement via LDAP, SMB, HTTP, and…

A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.

A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

MSSQL client for SCCM environments, enabling reconnaissance, remote PowerShell execution on managed clients, and extraction of sensitive secrets such…

An interactive CLI application for interacting with authenticated Jupyter instances.