
VMkatz
Extract Windows credentials directly from VM memory snapshots and virtual disks

Extract Windows credentials directly from VM memory snapshots and virtual disks

CredsHunter - Credential Hunting scripts for Windows and Linux OS

Post-Exploitation EVTX Analyzer for BloodHound Mapping

Offline AI Security Assistant for Air-Gapped Pentesting

PowerShell script that aim to help uncovering (eventual) persistence mechanisms deployed by a threat actor following an Active Directory domain…

Offset Independent Credential Extraction Tool

Create and enumerate hidden desktops.

PowerShell tool for red teamers that clears execution evidence by stopping event logging, removing file and registry artifacts, and saving timestamps…

Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase.

Modular incident response toolkit for collecting forensic data from potentially infected macOS endpoints, capturing browser artifacts, persistence…

Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps.

Reports on post-exploitation on honeypot exploiting vulnerable wu-ftpd (CVE-2001-0550)

Automates Linux swap analysis to extract user credentials, web form data, WiFi keys, and HTTP authentication during post-exploitation or forensic…

Powershell Empire Persistence finder