One WSL BOF to rule them all

No One（无名）：Next Generation Polyglot Website Manager

This code silently installs Chrome extensions on Mac, Windows, and Linux

A fast TCP/UDP tunnel over HTTP

Wonka is a sweet Windows tool that extracts Kerberos tickets from the Local Security Authority (LSA) cache. Like finding a ticket, but for security research and penetration testing! 🎫

Proof-of-Concept tool for extracting NTLMv1 hashes from sessions on modern Windows systems.

Weaponizing DCOM for NTLM Authentication Coercions

WSUS Unauthenticated RCE

Free Images for EVE-NG and GNS3 containing routers, switches,Firewalls and other appliances, including Cisco, Fortigate, Palo Alto, Sophos and more. Master the art of networking and improve your sk…

让fscan再次伟大

Exhaustive search and flexible filtering of Active Directory ACEs.

MemProcFS

Nuclei POC，每2小时更新 | 自动整合全网Nuclei的漏洞POC，实时同步更新最新POC，保存已被删除的POC。通过批量克隆Github项目，获取Nuclei POC，并将POC按类别分类存放，使用Github Action实现。已有41w+POC，其中3.5w+高质量POC

SCEP request tool for AD CS and Intune

2026最新悄咪咪收集的10000+个Telegram群合集、tg导航，附全网最有趣好用的机器人BOT🤖【tg10000.com】

Enumerate Domain Users Without Authentication

Check for LDAP protections regarding the relay of NTLM authentication

CVE-2025-32463 Proof of concept

Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking

awesome cloud security 收集一些国内外不错的云安全资源，该项目主要面向国内的安全人员

Adds playful pets 🦀🐱🐶 in your VS Code window

Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI

tomcat CVE-2024-50379/CVE-2024-56337 条件竞争文件上传exp

Shadow Dumper is a powerful tool used to dump LSASS memory, often needed in penetration testing and red teaming. It uses multiple advanced techniques to dump memory, allowing to access sensitive da…

grs内网穿透工具通过reality协议隐藏特征

Bypass Chromium's App-Bound Encryption via Direct Syscall-based Reflective Process Hollowing. Extract cookies, passwords, payment methods & tokens from Chrome, Edge, Brave & Avast - fileless, user-…

Embed a payload inside a PNG file

Open-source security research tool for identifying origin IP exposure of websites protected by Cloudflare and similar reverse proxy services.

快速Go建你的免杀项目

⬛️ CLI tool and library for saving complete web pages as a single HTML file