Dumps secrets remotely using a variety of techniques including DCSync (without running code on DC), …

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup…

Creates malicious files (LNK, SCF, PDF, DOCX, etc.) that force a Windows system to authenticate to a…

365-Stealer is a phishing simualtion tool written in python3. It can be used to execute Illicit Cons…

An Advanced Web Application Firewall that protects against threats like SQL injection and XSS by fil…

Full-featured WinRM shell for hacking and penetration testing. Supports pass-the-hash, file upload/d…