Tools

ricardojoserf/autoptt

Automated Pass-the-Ticket (PtT) attack. Standalone alternative to Rubeus and Mimikatz for this attack. Implemented in C#, C++, Crystal, Python and…

jonyfilc/printspoofer-reflectivedll

The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040/CVE-2019-1019) has been implemented as a Reflective DLL for penetration…

e-fin/pypspipejack

Python implementation of OpenPsPipeJack

jakobfriedl/tgt-monitor-bof

Async BOF to automatically extract or renew Kerberos TGTs on a target system.

tc4dy/cve-2026-6875-poc-exploit

CVE-2026-6875 ServiceNow Pre-Auth RCE Framework 🔥 JS Injection → Sandbox Escape → RCE → Root. Features: --detect, --exec, reverse/interactive shell,…

28zaaky/khaos-c2

KHAOS is a modern C2 framework that routes agent traffic through cloud services already trusted by enterprise networks.

ly1g3/cisco-cve-2023-20075

Cisco Email Security Appliance: Local Privilege Escalation and Shell Escape

hackndo/pygpoabuse

Partial python implementation of SharpGPOAbuse

ttpreport/ligolo-mp

Multiplayer pivoting solution

a-poc/redteam-tools

Tools and Techniques for Red Team / Penetration Testing

mzhmo/powershellkerberos

Some scripts to abuse kerberos using Powershell

tdragon6/supershell

Supershell C2 远控平台，基于反向SSH隧道获取完全交互式Shell

mayyhem/sharpsccm

C# post-exploitation tool for abusing Microsoft Configuration Manager (SCCM) to perform lateral movement, credential gathering, and NTLM…

meowmycks/trustme

BOF to impersonate TrustedInstaller via DISM API trigger and thread impersonation

sensepost/susinternals

psexecsvc - a python implementation of PSExec's native service implementation

0xsh3llf1r3/coldwer

Cobalt Strike BOF to freeze EDR/AV processes and dump LSASS using WerFaultSecure.exe PPL bypass