
Spray365
Spray365 makes spraying Microsoft accounts (Office 365 / Azure AD) easy through its customizable two-step password spraying approach. The built-in…

Blind XSS detection and exploitation platform with persistent sessions, reverse proxy, and automated information gathering for penetration testers…

Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)

Automated CDN origin-IP discovery skill for Claude Code that runs 40+ prioritized OSINT methods, cross-validates candidates via SSL and HTTP…

CVE-2018-13379 mass exploiter for Fortinet FortiOS SSL VPN. Extracts credentials instantly, saves to CSV + PostgreSQL. Multi-threaded, no bullshit…

Post-exploitation platform automating enumeration, privilege escalation, persistence, and C2 operations via reverse/bind shells with cross-platform…

onedrive user enumeration - pentest tool to enumerate valid o365 users

Nerv0us r4bbit - Post Exploitation Windows Enumeration Tool

Red Team Cheatsheet in constant expansion.

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Tools and Techniques for Red Team / Penetration Testing

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

A Bash script that downloads and unzips scripts that will aid with privilege escalation on a Linux system.

Collection of PowerShell functions a Red Teamer may use in an engagement

CredsHunter - Credential Hunting scripts for Windows and Linux OS

A practical client for ADWS in Golang.

Python3 implementation of ADRecon with support for NTLM and Kerberos authentication querying LDAP. Generates individual CSV files and a single XSLX +…

A single binary that folds a port scanner, the full Exploit-DB index (47k entries) and runnable exploit modules into one tool. Written in Rust, runs…