WinFlesher
mindsflee/winflesherAutomated attack surface assessment framework for Active Directory and local infrastructures, correlating vulnerabilities with attack paths to domain…
configuration-auditinglateral-movementpenetration-testing+4
mindsflee/winflesherAutomated attack surface assessment framework for Active Directory and local infrastructures, correlating vulnerabilities with attack paths to domain…
61106960/adpeasPowershell tool to automate Active Directory enumeration.
ghostpack/rubeusTrying to tame the three-headed dog.
samugit83/redamonAn AI-powered agentic red team framework that automates offensive security operations, from reconnaissance to exploitation to post-exploitation, with…
praetorian-inc/wasmforgeWasmForge — compile Go and C# programs to single-binary, WASM-sandboxed native executables with polymorphic output.
specterops/bloodhoundSix Degrees of Domain Admin
ghostpack/seatbeltSeatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security…
kaandemir993/lumma-stealer-dllhost-hollowing-c2-domains-payload-extraction-analysisIn-depth reverse engineering analysis of Lumma Stealer, an info-stealer using process hollowing, Native API calls, and C2 communication. Includes…
broskigx/oihk-pentestingAutonomous multi-agent AI penetration-testing engine: a governed tool sandbox, an immutable evidence-and-validation gate, and a reproducible…
redsiege/edd.NET-based Active Directory enumeration tool inspired by PowerView. Enumerates domains, users, computers, groups, shares, and sessions. Supports LDAP…
depthsecurity/relayking-depthDominate the domain. Relay to royalty.
mdsecactivebreach/sitrepExtensible host triage tool for red teams, dynamically loading OpSec-aware checks to gather user, domain, privilege, and credential information from…
moscowchill/lstar-enLSTAR - CobaltStrike Translated to EN
cogiceo/gpohoundOffensive GPO dumping and analysis tool that leverages and enriches BloodHound data
outflanknl/c2-tool-collectionA collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.
yeeb1/socktailLightweight Go binary that joins a device to a Tailscale network and exposes a local SOCKS5 proxy for ephemeral red team access. Supports…
horizon3ai/backup_dc_registryA simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY
newazbenalam/root-my-galaxy-payloadsDevice-specific CVE-2026-43499 root payloads and KernelSU artifacts for Samsung Galaxy models, with firmware profiles, exploit source, and a support…