


Rusty Impersonate

Python tool to automatically perform SPN-less RBCD attacks.

Leverage WindowsApp createdump tool to obtain an lsass dump

This tool can be used during internal penetration testing to dump Windows credentials from an already-compromised host. It allows one to dump SYSTEM,…

A SOCKS proxy for Citrix.

Encrypted C2 framework for post-exploitation and lateral movement, supporting PowerShell implants and custom modules for red team engagements.

PoC to tunnel the Meterpreter reverse HTTP shell over RDP Virtual Channels

A C# implementation of dumping credentials from Windows Credential Manager

Impersonate Logged In Accounts & Execute Commands

C&C Botnet written in Python with fabric

Python implementation of OpenPsPipeJack

CVE-2026-6875 ServiceNow Pre-Auth RCE Framework 🔥 JS Injection → Sandbox Escape → RCE → Root. Features: --detect, --exec, reverse/interactive shell,…


Common library for tools implementing GPO attack vectors

MakeMeEnterpriseAdmin