PingCastle - Get Active Directory Security at 80% in 20% of the time

• UpdatedFeb 28, 2025
• C#

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

• UpdatedMay 23, 2024

记录自己编写、修改的部分工具

• UpdatedJul 11, 2021
• Python

A PowerShell tool that takes strong inspiration from CrackMapExec / NetExec

• UpdatedMar 11, 2025
• PowerShell

Credentials gathering tool automating remote procdump and parse of lsass process.

• UpdatedJun 20, 2020
• Python

Dump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later!

• UpdatedFeb 6, 2025
• C#

PowerShell module for Mimikatz

• UpdatedDec 28, 2019
• PowerShell

Red teaming tool to dump LSASS memory, bypassing basic countermeasures.

• UpdatedDec 31, 2024
• Rust

This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone is created, it utilizes MINIDUMP_CALLBACK_INFORMATION callbacks to generate a memory dump of the cloned process

• UpdatedOct 19, 2024
• C++

Perform DCSync operation without mimikatz

• UpdatedNov 5, 2024
• C

Python3 script to parse txt files containing Mimikatz output

• UpdatedJun 19, 2020
• Python

import pyd or execute PE all from memory using only pure python code and some shellcode tricks

• UpdatedMar 16, 2017
• Python

用c#实现了个远程拉取Mimikatz.ps1

• UpdatedDec 7, 2023
• PowerShell

PowerShellUtilities provides various utility commandlets.

• UpdatedAug 3, 2020
• PowerShell

Bypass国内主流杀软

• UpdatedMay 9, 2022
• C

Invoke-KleptoKitty - Deploys Payloads and collects credentials

• UpdatedJul 28, 2021
• PowerShell

Powerful script for logical obfuscation of powershell scripts

• UpdatedMar 7, 2019
• Python

Windows10 hardening implemented in powershell for consumer or enterprise deployment

• UpdatedNov 15, 2017
• PowerShell

A minimal safe version of mimikatz to only allow the export of non-exportable Windows certificates

• UpdatedSep 23, 2018
• C

Script to extract the cached credentials from SSSD, getting Active Directory credentials from Unix systems

• UpdatedJun 14, 2023
• Shell