
ad-autopwn
Automated Active Directory attack chain from zero-auth to Domain Admin. Chains 25+ techniques including Kerberoast, AD CS ESC1-16, Shadow…

Automated Active Directory attack chain from zero-auth to Domain Admin. Chains 25+ techniques including Kerberoast, AD CS ESC1-16, Shadow…

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

Abusing Reddit API to host the C2 traffic.

Offensive Lua.

PowerSploit - A PowerShell Post-Exploitation Framework


All-Rust Active Directory exploitation framework: LDAP/SMB/Kerberos enumeration, attack-graph pathfinding, Kerberoasting, NTLM relay, ticket forging,…

ExportHider: Generating Export Table during Runtime to Hide the Exported Functions from the DLL File.

Unsigned Kernel Mode Driver that does memory modifications

Spicy malware 0day. Full kill-chain malware: exploit, pivot, c2, persistence. Rust converted to pseudo-code - if you're smart you can build it…

Struts2 S2-045/S2-046 CVE-2017-5638 detection & exploitation tool

CVE-2025-55182漏洞检测工具

My view on IngressNightmare vulnerability (CVE-2025-1974)

CVE-2024-23897: Jenkins Arbitrary File Read Lead to RCE

CVE-2021-1675 / CVE-2021-34527 - PrintNightmare Python, C# and PowerShell Exploits Implementations (LPE & RCE)

This is a script written in Python that allows the exploitation of the Chamilo's LMS software security flaw described in CVE-2023-4220