AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP. - mrexodia/ida-pro-mcp

CVE-2025-1974. Contribute to sandumjacob/IngressNightmare-POCs development by creating an account on GitHub.

Integrate Burp Suite with AI Clients using the Model Context Protocol (MCP).

The IBM X-Force Red team covers the fundamentals of COM and DCOM, dives into the RunAs setting and why authentication coercions are impactful and introduces a new credential harvesting tool.

Impersonate Tokens using only NTAPI functions. Contribute to ricardojoserf/NativeTokenImpersonate development by creating an account on GitHub.

This blog post documents the process of building a functional C++ Ransomware Proof-of-Concept. This post breaks down how I went from zero to a Havoc C2-powered ransomware PoC.

A service container for interacting with SRA's VECTR - MythicAgents/VECTR

Hijacks code execution via overwriting Control Flow Guard pointers in combase.dll - iilegacyyii/DataInject-BOF

BloodHound-MCP-AI is integration that connects BloodHound with AI through Model Context Protocol, allowing security professionals to analyze Active Directory attack paths using natural language ins...

Exploitation module for CVE-2025-32433 (Erlang/OTP) - exa-offsec/ssh_erlangotp_rce

The CVE-2025-21204 is precisely that kind of vulnerability. It doesn't require a zero-day exploit or complex memory corruption chain. It doesn't need a phishing campaign or a dropped malware loader. All it takes is: A misused filesystem trust, a writable…

mssql_dumper is a powerful NetExec module designed to hunt for sensitive data across Microsoft SQL Server databases with surgical precision. - LTJAXSON/MSSQL---Dumper

Contribute to LuemmelSec/Pentest-Tools-Collection development by creating an account on GitHub.

Execute commands interactively on remote Windows machines using the WinRM protocol - adityatelange/evil-winrm-py

Backdooring VSCode Projects. Contribute to SaadAhla/VSCode-Backdoor development by creating an account on GitHub.

Contribute to dslee2022/SignatureKid development by creating an account on GitHub.

BaldHead is a modular and interactive Active Directory (AD) attack framework built for red teamers and security testers. It automates enumeration and exploitation of AD misconfigurations - ahmadall...

Decrypt SCCM and DPAPI secrets with Powershell. . Contribute to The-Viper-One/Invoke-PowerDPAPI development by creating an account on GitHub.