backup_dc_registry
horizon3ai/backup_dc_registryA simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY
exploitationlateral-movementmisconfiguration+3
97
horizon3ai/backup_dc_registryA simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY
nullsection/chisel-ngChisel new generation, written in rust. SSH under WSS with some customization.
0x4d31/honeybitsA PoC tool designed to enhance the effectiveness of your traps by spreading breadcrumbs & honeytokens across your systems to lure the attacker toward…
uber-common/mettaAn information security preparedness tool to do adversarial simulation.
boostsecurityio/smokedmeatA CI/CD Red Team Framework for demonstrating Build Pipeline security risks.
rapid7/metasploit-frameworkOpen-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…
infosecn1nja/red-teaming-toolkitThis repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.
lgandx/responderResponder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2,…
cdk-team/cdk📦 Make security testing of K8s, Docker, and Containerd easier.
ad-security/ad_minerAD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security…
chaelsoo/zetsuA personal RAG system for offensive security knowledge
hac01/azure-pentesting-suiteGo toolkit for authorized Azure security assessments: enumerates subscriptions and resources, audits misconfigurations, and attacks public Blob…
wavestone-cdt/defcon-cicd-pipelines-workshopHands-on CI/CD pipeline security workshop with Terraform lab, AWS exploitation, Kubernetes escape, and artifact backdooring exercises for offensive…
owasp/owasp-cstgVendor-neutral cloud security testing guide with structured phases for enumeration, privilege escalation, lateral movement, and post-exploitation…
0nin0hanz0/cve-2024-24919-pocProof-of-concept exploit for CVE-2024-24919, an unauthenticated file read in Check Point Security Gateways; scans single or multiple IP targets and…
kaleth4/cve-2026-20180In-depth technical analysis of Cisco ISE RCE vulnerabilities, including exploitation techniques, evasion methods, and remediation strategies for…
blue0x1/sqlwindsSQLWinds - SQL Server Security Assessment & Post-Exploitation Toolkit
shadow1ng/fscan一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)