Lee Chagolla-Christensen

PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.

Executes PowerShell from an unmanaged process

Assorted scripts and one off things

No description.

A standalone SSH server written in Go

Scans for .NET Deserialization Bugs in .NET Assemblies

Kerberos TGS_REP cracker written in Golang

Run multiple PowerShell scripts concurrently in different app domains!

A simple SOCKS5 server written in Go

Obtains a crackable hash for the current user account

No description.

No description.

SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.

PowerTools is a collection of PowerShell projects with a focus on offensive operations.

PowerShell - Live disk forensics platform

Enumerate all network shares in the current domain. Also, can resolve names to IP addresses.

My musings with PowerShell

A little tool to play with Windows security

PowerSploit - A PowerShell Post-Exploitation Framework

The Hunting ELK

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

Empire is a pure PowerShell post-exploitation agent.

NetSPI PowerShell Scripts

Automated, Collection, and Enrichment Platform

No description.

Converts Ghidra's HTLM help files to markdown

Set of tools to analyze Windows sandboxes for exposed attack surface.

RpcView is a free tool to explore and decompile Microsoft RPC interfaces

Docker image to build the Tribes source using the original build chain

Easy and Repeatable Kubernetes Development

Source from the Microsoft .NET Reference Source that represent a subset of the .NET Framework

This is used for contributions to the Windows 10 content for IT professionals on docs.microsoft.com.

No description.

A PowerShell module to facilitate building, configuring, deploying, and auditing Windows Defender Application Control (WDAC) policies

Dreadnode Strikes SDK

Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we configure the agent for adversarial thinking, and perform research or attack/defense operations.

Six Degrees of Domain Admin

AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.

An offensive data enrichment pipeline

Ghidra is a software reverse engineering (SRE) framework

No description.

Extend dia2dump utility to generate cpp code from pdb

Common library used by SharpHound.

C# Data Collector for BloodHound

Situational Awareness commands implemented using Beacon Object Files

Search files for extensions as well as text within.

A collaborative, multi-platform, red teaming framework

SpecterOps Historical Records

No description.

A collection of useful .gitignore templates

PowerShell module for creating and managing Sysinternals Sysmon config files.

Automatically exported from code.google.com/p/tcltcc