Comprehensive Windows Syscall Extraction & Analysis Framework - xaitax/NTSleuth

load shellcode without P/D Invoke and VirtualProtect call. - Mr-Un1k0d3r/DotnetNoVirtualProtectShellcodeLoader

Authenticated 0-click RCE against Linux 6.1.45 for CVE-2023-52440 and CVE-2023-4130 - BitsByWill/ksmbd-n-day

EDR-Freeze is a tool that puts a process of EDR, AntiMalware into a coma state. - TwoSevenOneT/EDR-Freeze

A Beacon Object File (BOF) for Havoc/CS to Bypass PPL and Dump Lsass - M1ndo/WerDump

A C# based Red Team utility, to execute commands on a remote windows system using SMB/SCCM - 5w0rdfi5h/Torpedo

PowerShell tool that shows how to read and write NTLM OWF values via samlib.dll. - kfallahi/NTLMPasswordChanger

PowerShell toolkit that extracts locked Windows files (SAM, SYSTEM, NTDS, ...) using MFT parsing and raw disk reads - kfallahi/UnderlayCopy

Decrypt Chromium based browser passwords with PowerShell. - The-Viper-One/Invoke-PowerChrome