Tools

xforcered/sqlrecon

A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

n3rada/mssqland

In-target C# post-exploitation tool for Microsoft SQL Server (MS SQL / MSSQL) traversing linked-server chains of any depth with cascading login…

secwiki/windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合

netspi/microburst

A collection of scripts for assessing Microsoft Azure security

nickvourd/windows-local-privilege-escalation-cookbook

Windows Local Privilege Escalation Cookbook

darkcodersc/win-brute-logon

Crack any Microsoft Windows users password without any privilege (Guest account included)

joelgmsec/autordpwn

The Shadow Attack Framework

quentinhardy/msdat

MSDAT: Microsoft SQL Database Attacking Tool

semperis/entragoat

A deliberately vulnerable Microsoft Entra ID environment. Learn identity security through hands-on, realistic attack challenges.

hackerhouse-opensource/iscsicpl_bypassuac

Autoelevate DLL search-order hijacking UAC bypass for x64 Windows 7–11, abusing 32-bit iscsicpl.exe via SysWOW64 to execute code without a UAC prompt.

p0dalirius/windows-coerced-authentication-methods

A list of methods to coerce a windows machine to authenticate to an attacker-controlled machine through a Remote Procedure Call (RPC) with various…

mwr-cybersec/pxethief

PXEThief is a set of tooling that can extract passwords from the Operating System Deployment functionality in Microsoft Endpoint Configuration Manager

phillips321/adaudit

Powershell script to do domain auditing automation

andreisss/ksldump

KslDump — Why bring your own knife when Defender already left one in the kitchen?

nickvourd/com-hunter

Windows COM hijacking persistence tool with search, classic, Task Scheduler, and TreatAs modes. Available as .NET executable and Cobalt Strike BOF…

xm0kht4r/ven0m-ransomware

Fully undetectable and evasive ransomware written in Rust, leveraging a BYOVD technique to disable AV/EDR solutions on the infected systems.