Execute commands in other Sessions

Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination IP addresses are parsed based on the server name in TLS Cli…

The home of the BriMor Labs rdpieces Perl script that tries to rebuild parsed RDP Bitmap Cache images

PDF dropper Red Team Scenairos

🐘 Effortless PostgreSQL backups with a user-friendly web interface! 🌐💾

Process Injection using Thread Name

PoC to self-delete a binary in C#

Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they face. #nolockdown

Enumerate the Domain for Readable and Writable Shares

Add Shadow Credentials to a target object by editing their msDS-KeyCredentialLink attribute

Shellcode loader designed for evasion. Coded in Rust.

Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI

A utility for producing an HTTP cache database to use with go-exploit

Information stealer logs parser

Build a full-featured home server or NAS replacement with an Ubuntu box and this playbook.

Keygen Admin for managing software licenses

Terminal UI library with rich, interactive widgets — written in Golang

GUI for Windows Installer to access tools and select installer automations from WinPE

An LLM-powered knowledge curation system that researches a topic and generates a full-length report with citations.

SMM UEFI module and client for UMD privilege escalation

Using Windows' own bootloader as a shim to bypass Secure Boot

Distributed LLM inference for mobile, desktop and server.

Payload encoding utility to effectively lower payload entropy.

convert VMWare and VirtualBox VM files to QEMU-KVM VM disk files

Details around how to setup WinRM Certificate Authentication for use in Ansible

Fragtunnel is a proof-of-concept (PoC) TCP tunnel tool that you can use to tunnel your application's traffic and bypass next-generation firewalls en route to the target.

Respotter is a Responder honeypot! Catch attackers and red teams as soon as they spin up Responder in your environment.

A chrome/Firefox extension to retrieve and load react javascript chunks all at once for a wide range of javascript techs