一个攻防知识库。A knowledge base for red teaming and offensive security.
Free copy of The Cyber Plumber's Handbook - The definitive guide to Secure Shell (SSH) tunneling, port redirection, and bending traffic like a boss.
RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.
Dominate Active Directory with PowerShell.
Windows remote execution multitool
mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse
Self-developed tools for Lateral Movement/Code Execution
a unique framework for cybersecurity simulation and red teaming operations, windows auditing for newer vulnerabilities, misconfigurations and privilege escalations attacks, replicate the tactics and techniques of an advanced adversary in a network.
APT38 Tactic PoC for Stealing 0days from security researchers
Manipulating and Abusing Windows Access Tokens.
MCP-native security automation workbench (SDK + CLI + MCP) — authorized testing + static AI/MCP attack-surface self-audit to SARIF / GitHub Code Scanning
Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement
Suricata rules for network anomaly detection
.NET 4.0 WinRM API Command Execution
C++ WinRM API via Reflective DLL
Remote service-staging tool built on Impacket, designed for BOF-style lateral movement workflows that lets you upload custom service loaders, set descriptions, and run them on demand.
This tool can be used during internal penetration testing to dump Windows credentials from an already-compromised host. It allows one to dump SYSTEM, SECURITY and SAM hives and once copied to the attacker machines provides option to delete these files to clear the trace.
A set of instructions, command and techniques that help during an Active Directory Assessment.
PwnRM is an operator-grade Active Directory post-exploitation platform engineered directly upon the native Microsoft PowerShell Remoting Protocol (MS-PSRP) and WS-Management (MS-WSMV) standards.
To associate your repository with the lateral-movement topic, visit your repo's landing page and select "manage topics."