
AD-PathFinder
Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.

Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.

A drone engineered to autonomously seek out, hack, and wirelessly take full control over any other Parrot or 3DR drones within wireless or flying…

Your MitM sidekick for relaying attacks featuring DHCPv6 DNS takeover as well as mDNS, LLMNR and NetBIOS-NS spoofing.

Field-validated offensive security skill pack with 169 techniques for reconnaissance and penetration testing. Covers CORS, SSRF, subdomain takeover,…

Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively…

Post-exploitation tool for identifying, profiling, and attacking Microsoft SCCM assets within Active Directory domains, streamlining credential…

SharpSuccessor is a .NET Proof of Concept (POC) for fully weaponizing Yuval Gordon’s (@YuG0rd) BadSuccessor attack from Akamai.

Proof-of-concept to demonstrate dynamic QR swap phishing attacks in practice.

BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions

This is a PoC code to exploit the IngressNightmare vulnerabilities (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974).

Drop a single binary into a compromised Kubernetes pod and instantly map every realistic attack path to cluster-admin, node escape, secret theft,…

Offensive MSSQL toolkit written in Python, based off SQLRecon

Technical Reference to multiple relay techniques

Tool to discover Resource-Based Constrained Delegation attack paths in Active Directory environments

CVE-2023-7028

TCP Port Forwarding Utility on C

PoC for CVE-2022-24342: account takeover via CSRF in GitHub authentication

Master the art of cloud exploitation. A specialized resource for offensive security researchers and red teamers focused on weaponizing…