SAERXCIT

Get-ModifiablePathFromProcmon

A simple PowerShell function parsing a Procmon CSV output to extract accessed filesystem and registry paths and using @itm4n's PrivescCheck's functions `Get-ModifiablePath` and `Get-ModifiableRegistryPath` to find paths modifiable by the user.

HookDetector

HookDetector identifies DLL-imported functions that have been hooked in its own process.

impacket

Impacket is a collection of Python classes for working with network protocols.

Certipy

Tool for Active Directory Certificate Services enumeration and abuse

CrackMapExec

A swiss army knife for pentesting networks

EnableParentPriv

Enables the requested privilege in its parent process: the shell calling it

InstallerFileTakeOver

regdiff.py

regdiff.py diffs two registry hives

ToyEDR

SharpHound

C# Data Collector for BloodHound