WinPEAS is a nice verbose privilege escalation for finding local privesc routes on Windows endpoints. Install + Usage: $wp...

LinPEAS is a nice verbose privilege escalation for finding local privesc routes on Linux endpoints. Install + Usage: curl -L...

Ligolo-ng is a simple, lightweight and fast tool that allows pentesters to establish tunnels from a reverse TCP/TLS connection using a...

A Windows persistence toolkit written in C#. The project has a wiki . Install: (Binary) You can find the most recent release here ....

Empire is a post-exploitation framework that allows you to generate payloads for establishing remote connections with victim systems....

Impacket provides a set of low-level Python bindings for various network protocols, including SMB, Kerberos, and LDAP, as well as...

Empire (Post-exploitation framework) SharPersist (Windows persistence toolkit) ligolo-ng (Tunneling tool that uses a TUN interface)...

Google Cloud is introducing a mandatory two-factor authentication (2FA) requirement for all users who sign in with a password. This move...

secretsdump (Remote hash dumper) Responder (LLMNR, NBT-NS and MDNS poisoner) evil-winrm (WinRM shell) Donut (In-memory .NET...

PowerZure is a PowerShell project created to assess and exploit resources within Microsoft’s cloud platform, Azure. PowerZure was created...

The aim of this project is to generate .html files that contain an encrypted HTA file. The idea is that when your target visits the page,...

A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host. Both Launchers run within their...

This resrouce is a collection of the most common and known techniques to bypass AppLocker. Since AppLocker can be configured in different...

MS-SQL (Microsoft SQL Server) is a relational database management system developed and marketed by Microsoft. This C# MS-SQL toolkit is...

A nice tool for checking a victims endpoint for vulnerabilites relating to high integrity processes, groups, hijackable paths, etc....