Lists (1)
Stars
SMBLoot is a terminal interface for browsing SMB shares, reading remote files, downloading and uploading files, and recursively inspecting remote directory trees.
Raw NTFS volume oracle: locked-file read and offline SAM hashes without LSASS
Kyocera cred dumper based on CVE-2022-1026
Havoc C2 BOF port of the KslD.sys BYOVD technique. Credential extraction from lsass via physical memory — no OpenProcess, no auditable API calls.
IoT Inspector: capturing and analyzing your smart home network traffic
Entra ID user enumeration and auth method discovery via the public GetCredentialType API
Bug bounty focused JavaScript security analysis for crawling web assets, source maps, and secret discovery
Fritter is a heavily modified fork of TheWover and Odzhan's Donut shellcode generator.
Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters
Matkap - hunt down malicious Telegram bots
PC 端语音输入工具，离线识别，高准确率、低延迟，支持热词、LLM润色。按住CapsLock或鼠标侧键X2说话，松开自动上屏。
Transforms complex documents like PDFs and Office docs into LLM-ready markdown/JSON for your Agentic workflows.
Initial Access and Post-Exploitation Tool for Entra ID and M365 with a browser-based GUI
A list of useful Powershell scripts with 100% AV bypass (At the time of publication).
Stealth headless browser for AI agents — bypass Cloudflare, bot detection, and anti-scraping. Drop-in Puppeteer/Playwright replacement.
Research into Undocumented Behavior of Azure AD Refresh Tokens
Training-free language model modification: Remove censorship, suppress slop, reduce sycophancy, and more
Orchestrate Claude, Codex and Grok in one app. Open-source (MIT), reuses the subscriptions you already pay for.
Obfusk8: lightweight Obfuscation library based on C++17 / Header Only for windows binaries
A collection of all the data i could extract from 1 billion leaked credentials from internet.
This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.
Proxy system that routes traffic through Cloudflare Workers for IP rotation and anonymity