redtop's Stars
Rurik/Noriben
Noriben - Portable, Simple, Malware Analysis Sandbox
g0tmi1k/exe2hex
Inline file transfer using in-built Windows tools (DEBUG.exe or PowerShell).
infosecn1nja/MaliciousMacroMSBuild
Generates Malicious Macro and Execute Powershell or Shellcode via MSBuild Application Whitelisting Bypass.
SafeBreach-Labs/pinjectra
Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)
0x00-0x00/ShellPop
Pop shells like a master.
jborean93/smbprotocol
Python SMBv2 and v3 Client
dirkjanm/PrivExchange
Exchange your privileges for Domain Admin privs by abusing Exchange
sensepost/mana
*DEPRECATED* mana toolkit for wifi rogue AP attacks and MitM
SySS-Research/Seth
Perform a MitM attack and extract clear text credentials from RDP connections
deepzec/Bad-Pdf
Steal Net-NTLM Hash using Bad-PDF
GhostPack/Rubeus
Trying to tame the three-headed dog.
Raikia/CredNinja
A multithreaded tool designed to identify if credentials are valid, invalid, or local admin valid credentials within a network at-scale via SMB, plus now with a user hunter
GoSecure/pyrdp
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
BloodHoundAD/SharpHound2
The Old BloodHound C# Ingestor (Deprecated)
ShawnDEvans/smbmap
SMBMap is a handy SMB enumeration tool
nccgroup/demiguise
HTA encryption tool for RedTeams
abaykan/CrawlBox
Easy way to brute-force web directory.
gentilkiwi/mimikatz
A little tool to play with Windows security
Kevin-Robertson/Invoke-TheHash
PowerShell Pass The Hash Utils
NotMedic/NetNTLMtoSilverTicket
SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket
christophetd/spoofing-office-macro
:fish: PoC of a VBA macro spawning a process with a spoofed parent and command line.
eladshamir/Internal-Monologue
Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS
dirkjanm/ldapdomaindump
Active Directory information dumper via LDAP
cloudkj/scar
Deploy static websites in seconds - with HTTPS, a global CDN, and custom domains.
matterpreter/DefenderCheck
Identifies the bytes that Microsoft Defender flags on.
brainfucksec/kalitorify
Transparent proxy through Tor for Kali Linux OS
dafthack/DomainPasswordSpray
DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!
hash3liZer/WiFiBroot
A Wireless (WPA/WPA2) Pentest/Cracking tool. Captures & Crack 4-way handshake and PMKID key. Also, supports a deauthentication/jammer mode for stress testing
TonyPhipps/Meerkat
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
s0md3v/AwesomeXSS
Awesome XSS stuff