
EntraPassTheCert
tool for requesting Entra ID's P2P certificate and authenticating to a remote Entra joinned devices with it

tool for requesting Entra ID's P2P certificate and authenticating to a remote Entra joinned devices with it

A technique to coerce a Windows SQL Server to authenticate on an arbitrary machine.

Active Directory ACL abuse toolkit for privilege escalation, DCSync, object ownership modification, and lateral movement via logon script…

Feature-rich Post Exploitation Framework with Network Pivoting capabilities.

Pastejacking - PasteZort

Ladon Scanner For Python, Large Network Penetration Scanner & Cobalt Strike, vulnerability / exploit / detection /…

mssql 终端连接工具|命令执行

Proof-of-concept for CVE-2024-37726: local privilege escalation in MSI Center via arbitrary file overwrite using symlink/junction attacks and OpLock…

Impersonate Logged In Accounts & Execute Commands

AI-powered LinkedIn engagement assistant

This Python script helps to detect the Etherleak (CVE-2003-0001) vulnerability on a target host by analyzing the padding data in network packets. The…

Exploit for CVE-2020-1472 (Zerologon) that resets domain controller machine account password, enabling credential dumping and privilege escalation to…

Hook PasswordChangeNotify

SOCKS proxy for port forwarding and RDP tunneling, enabling lateral movement and remote access in penetration testing scenarios.

CVE-2020-13941: Abusing UNC Paths in Windows Environments in Apache Solr

Tool for extracting Windows credentials (passwords, hashes, Kerberos tickets) from memory and performing pass-the-hash, pass-the-ticket, and golden…

A framework for constructing self-spreading binaries

Phishing with a fake reCAPTCHA