Snaffler in Python

Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credential…

Guaranteed compile-time string literal obfuscation header-only library for C++14

403/401 bypass tool: finds HTTP access-control bypasses via path, method, header and raw-request mutations. Baseline diff, auto-calibration, replayable curl evidence.

a CLI tool for analyzing Microsoft Patch Tuesday security updates. Fetches patch data from MSRC, downloads update packages, extracts binaries, and compares pre/post-patch versions using BinDiff.

A BloodHound OpenGraph collector that models Windows local privilege escalation as interconnected attack paths.

Python3 implementation of ADRecon with support for NTLM and Kerberos authentication querying LDAP. Generates individual CSV files and a single XSLX + HTML report about your AD domain.

This repo contains useful scripts that AI created for me which I would have been too lazy for

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

HTTP parameter discovery suite.

A cli tool that helps signing and zip aligning single or multiple Android application packages (APKs) with either debug or provided release certificates. It supports v1, v2 and v3 Android signing s…

Flutter Reverse Engineering Framework

Kernel Level NMI Callback Blocker

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

A Windows Named Pipe Multi-tool / Proxy

Supports RSC fingerprinting and exploitation of the React component vulnerability CVE-2025-55182.

Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking

Offensive GPO dumping and analysis tool that leverages and enriches BloodHound data

This is the tool to dump the LSASS process on modern Windows 11

A `.git` folder disclosure exploit

A Chrome/Firefox browser extension to show alerts for reflected query params, show Wayback archive links for the current path, show hidden elements and enable disabled elements.

Pentester's Promiscuous Notebook

jxscout superpowers JavaScript analysis for security researchers

Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.

AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses

BloodHound Automation: Collection, Analysis and Data Import

Evasion kit for Cobalt Strike