WesleyWong420

gruvbox

Retro groove color scheme for Vim

markmap

Build mindmaps with plain text

linWinPwn

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

wmiexec-Pro

New generation of wmiexec.py

adidnsdump

Active Directory Integrated DNS dumping by any authenticated user

Group3r

Find vulnerabilities in AD Group Policy, but do it better than Grouper2 did.

Misconfiguration-Manager

Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.

LdapRelayScan

Check for LDAP protections regarding the relay of NTLM authentication

RemoteKrbRelay

Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework

dploot

DPAPI looting remotely and locally in Python

autobloody

Tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound

go-secdump

Tool to remotely dump secrets from the Windows registry

NativeDump

Dump lsass using only Native APIs by hand-crafting Minidump files (without MinidumpWriteDump!)

Invoke-ADEnum

Automate Active Directory Enumeration

LetMeowIn

A sophisticated, covert Windows-based credential dumper using C++ and MASM x64.

pyGPOAbuse

Partial python implementation of SharpGPOAbuse

Sealighter

Sysmon-Like research tool for ETW

RedCsharp

Collection of C# projects. Useful for pentesting and redteaming.

pre2k

llvm-string-obfuscator

LLVM String Obfuscator

TrickDump

Dump lsass using only NTAPIS running 3 programs to create 3 JSON and 1 ZIP file... and generate the Minidump later!

Tempest

A command and control framework written in rust.

smbtakeover

BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions

Maestro

Graphpython

Modular cross-platform Microsoft Graph API (Entra, o365, and Intune) enumeration and exploitation toolkit

Shwmae

QRucible

Python utility that generates "imageless" QR codes in various formats

SessionExec

Execute commands in other Sessions

ETWListicle

List the ETW provider(s) in the registration table of a process.

stealthguardian

StealthGuardian is a middleware layer that can be combined with adversary simulation tools to verify the resistance, detection level and behaviour detection of executed actions against defined defence mechanisms.