A visual methodology tracking platform tailored for offensive security assessments

A flexible, AI powered C2 framework built with operators in mind

TokenCert

Email enumerator, username generator, and context validator for hunter.io, snov.io, and skrapp.io

Certified Red Team Professional (CRTP) - Notes

A lightweight Command and Control (C2) framework built for offensive security research and red teaming (Post Exploitation).

A C# implementation of dumping credentials from Windows Credential Manager

takes shellcode bad-bytes and banishes them, returning cleaned shellcode with preserved functionalities

A comprehensive guide to adversarial testing and security evaluation of AI systems, helping organizations identify vulnerabilities before attackers exploit them.

execute PE in memory Filelessly

A C# tool for extracting information from SCCM PXE boot media.

Recon Subdomain Scan Tool

Kevlar Benchmark: OWASP Top 10 for Agentic Apps (AI-Agents) 2026 a Red Team Benchmark

A FAFO project: Command execution and data exfiltration of any kind through live streaming platforms

A Python-Based Tool for Reconnaissance and State Management of AD Principals

🫡 Nikki — AI Assistant for Red Team & DevOps in the Terminal (fish-shell)

Tool to scan servers and hosts using dynamic paths.

dnskire: a tool for file infiltration over DNS

Monitoring tool to detect patterns or IOCs (strings, regex, VirusTotal) and alert you and your team via console, Telegram or SMS written in Rust. 🦀

Stealth Reconnaissance Toolkit for Red Team Operations

S3 Bucket Enumeration Script for Pentesting

PowerHouse is a C++ DLL that provides direct PowerShell execution without launching powershell.exe. It features interactive console mode with ASCII banner and base64-encoded script execution from .dat files. Using COM interop through WScript.Shell, it captures both output and error streams while gracefully handling no-console scenarios.

A C# based Red Team utility, to execute commands on a remote windows system using SMB/SCCM

The best ransomware simulation for enterprise security

Cobalt Strike 4.x Aggressor Script to assist the Red Team Operator with number, datetime, and data conversions/decoding.

A simple tool to extract saved passwords from Chromium-based browsers and send them to a Discord channel

Rust DLL Search Order Hijacking

Polymorphic PHP one-line backdoor

RedSnitch creates specially crafted PDFs that capture NTLM hashes, providing red teamers with an efficient and covert way to gather credentials during engagements.

A replica of proxychains, with UDP/TCP and future ptrace() support