A visual methodology tracking platform tailored for offensive security assessments

TokenCert

Email enumerator, username generator, and context validator for hunter.io, snov.io, and skrapp.io

A C# implementation of dumping credentials from Windows Credential Manager

A lightweight, modular Command and Control (C2) framework built for offensive security research and red teaming (Post Exploitation).

Certified Red Team Professional (CRTP) - Notes

execute PE in memory Filelessly

Recon Subdomain Scan Tool

A FAFO project: Command execution and data exfiltration of any kind through live streaming platforms

Tool to scan servers and hosts using dynamic paths.

Monitoring tool to detect patterns or IOCs (strings, regex, VirusTotal) and alert you and your team via console, Telegram or SMS written in Rust.🦀

PowerHouse is a C++ DLL that provides direct PowerShell execution without launching powershell.exe. It features interactive console mode with ASCII banner and base64-encoded script execution from .dat files. Using COM interop through WScript.Shell, it captures both output and error streams while gracefully handling no-console scenarios.

A C# based Red Team utility, to execute commands on a remote windows system using SMB/SCCM

The best ransomware simulation for enterprise security

A simple tool to extract saved passwords from Chromium-based browsers and send them to a Discord channel

S3 Bucket Enumeration Script for Pentesting

Rust DLL Search Order Hijacking

RedSnitch creates specially crafted PDFs that capture NTLM hashes, providing red teamers with an efficient and covert way to gather credentials during engagements.

Cobalt Strike 4.x Aggressor Script to assist the Red Team Operator with number, datetime, and data conversions/decoding.

Khyber Pass is a Penetration Testing tool designed to intercept password changes on Linux systems. It effectively filters the passwd command to capture any passwords entered by the user and sends them to a specified Discord Webhook for monitoring purposes.