weaselsec/godpotato-aggressor-scriptCobalt Strike Aggressor script that automates Windows service-account-to-SYSTEM privilege escalation via GodPotato during red team operations.
jsecu/bof-pack-1A care package of useful bofs for red team engagments
0xthirteen/rpc2wcPoC that triggers Windows WebClient startup through EFS RPC call chains and WNF messages, enabling red teams to explore unprivileged service-start…
rhzv0/batFull-spectrum Linux adversary simulation platform with kernel-level stealth, C2 beaconing, privilege escalation, credential harvesting, lateral…
behzadmagzer/auto-postxploitWindows Auto Post Exploitation - For ReD Team
shellkraft/ledgerAn aggressor script that tracks operational changes made during a red team engagement. Gives you a full audit trail of what was changed and what…
agampreet-singh/redrootRedRoot is a Python-based, CLI-driven offensive security framework that brings essential red teaming tools into one unified terminal environment.…
amitr12/cybersecSingle-file HTML cheat sheet for red teamers and pentesters with auto-injecting attacker/target variables, OS-aware reverse shell generator, and…
grisuno/cve-2022-22077BYOVD exploitation framework for CVE-2022-22077 targeting RTCore64.sys. Demonstrates kernel token theft, privilege escalation to SYSTEM, and C2…
nu11secur1ty/offensive-securityComprehensive offensive security toolkit covering penetration testing, exploitation, and red teaming operations with modular attack workflows.
peewpw/exploithostingHost-based exploitation utility for penetration testing and red team operations, enabling payload delivery and post-exploitation actions on target…
ash1996x/cve-2025-50154-aggressor-scriptCobalt Strike Aggressor script that weaponizes LNK and Library-MS files to trigger SMB NTLMv2 hash disclosure, including CVE-2025-24054 bypass, for…
youneskc/smb-penetration-testing-ntlm-relay-version-2-SMB Red Team Lab— NTLM Relay via LLMNR Poisoning, CVE-2007-2447, NTLMv2 Hash Cracking & NT AUTHORITY\SYSTEM on Windows 10
devinliggins14/smb-pentest-exploiting-cve-2007-2447-on-metasploitable-2Step-by-step penetration testing lab exploiting Samba CVE-2007-2447 on Metasploitable 2 using Metasploit, demonstrating root compromise, credential…
randomrobbiebf/loot-meCollects files and commands post-exploitation, formats them into Markdown reports, and helps find sensitive information for red team reporting.
p1rat3r00t/why-so-serious-samPoC malware that uses exploit CVE-2021-36934 (improper ACLs on shadow copies) using a fileless red team method on Windows 10/11 with LOLBins,…
mitre/caldera-agentWindows service agent for CALDERA adversary emulation platform. Installed on target computers to communicate with the CALDERA server, enabling…
conviso-archives/firefox_tunnelBrowser-based C2 tunnel that exfiltrates payloads through Firefox's cookie.sqlite and auto-submitting HTML/JS, enabling stealthy firewall bypass for…
