Wide Open: 147 Unauthenticated MCP Servers Exposed | Pluto Security

GitHub - VoidSecSoftwares/voidsyscall: Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.

GitHub - mlcsec/ResetSpy: Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal

GitHub - TwoSevenOneT/InjectSetConsole: Proof of Concept for Process Code Injection Without Using WriteProcessMemory

GitHub - crypt0p3g/adnullenum: One-pass anonymous Active Directory enumeration over SAMR and LSARPC — null session, no credentials, with structured reusable output.

GitHub - crypt0p3g/dpapi-toolkit: Drop any Windows DPAPI artifact and it identifies the format and the exact master key it needs, then decrypts once you supply the key. Offline, CLI + web UI.

GitHub - g0h4n/PassTheCert-rs: Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀

GitHub - nmht3t/OneDrive-UDC2: OneDrive as a covert C2 transport for Cobalt Strike

GitHub - almounah/silph: Stealthy In-Memory Local Password Harvester (SILPH) tool: dump LSA, SAM and DCC2 with indirect syscall

GitHub - Whispergate/msteams: Mythic C2 MSTeams Communication Channel

GitHub - crypt0p3g/adexview: Browse, search and audit AD Explorer snapshots offline in your browser: decoded attributes, LDAP filters, and reports for what BloodHound doesn't show (DNS, subnets, DFS, ...

GitHub - dirkjanm/askWAM: Ask the Web Account Manager (WAM) for Entra ID tokens

Shellcode Loaders: Advanced Execution & Evasion Tradecraft

GitHub - MSNightmare/ShieldCrash: Windows Defender 0day Vulnerability

Using WebDav to Outsmart Smartscreen, MOTW, and that OTHER Alert

Activating Chrome DevTools Protocol in Memory: Bypassing -remote-debugging-port Restrictions - Pikered

Provisioning Packages

GitHub - tyeurada/edrEvasionWorkshop: Workshop materials for “Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel” presented at DEF CON 34 and BSidesLV 2026. Covers malware develo...

GitHub - SpecterOps/Blacklight: Blacklight is a cross-platform toolkit for mapping, analyzing, and understanding the local AI agent attack surface across Windows, macOS, and Linux.

GitHub - AWSHound/AWSHound: AWS Bloodhound OpenGraph Connector

GitHub - r1cksec/cheatsheets: Collection of knowledge about information security

GitHub - NetSPI/AD-PathFinder: Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.

GitHub - DavidCarliez/trustmebro: Bypass llm guardrails by confusing it with fabricated tool output.

QSB-118: Dom0 arbitrary code execution in qvm-copy-to-vm error reporting

GitHub - zer0condition/GoodmansKernel: Run unsigned kernel payloads in a signed kernel driver via wasm3. No JIT/W^x (HVCI/etc., compliant)

GitHub - xpn/Ouroboros: A POC tool for exploring dev-tunnels

GitHub - rylena/sshdesk: A full interactive remote desktop delivered entirely through SSH and displayed directly in your terminal.

GitHub - MythicAgents/Hades: Hades is a fully-featured cross-platform Chrome Extension agent. Hades is designed for Mythic 3.0 and newer.

Playing a Different Game: Rethinking Modern Defense Evasion

Playing Around With ADIDNS RPC Internals

GitHub - Arcanum-Sec/wraith: WRAITH — a modern browser-hooking framework (BeEF + blind-XSS successor) for red teams, researchers, and educators. For authorized security testing, research & education o...

GitHub - KriyosArcane/TrustMeBro: Authenticode signature manipulation toolkit for Red Team operations and security research. Covers signature stealing, metadata cloning, SIP hijacking across 19 file t...

GitHub - OmriBaso/SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit: Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrar...

GitHub - Whispergate/SCADAVER: SCADAver: a Rust-powered, multi-protocol OT/ICS security framework for authorized labs featuring asset discovery, enumeration, controlled validation, simulators, and CLI...

GitHub - ServiceNow/Dark-Agent: Mythic C2 agent with a full in-memory BOF loader for macOS and Linux

Smile, You’re on Camera! Part 2: Lazarus IT Workers Exposed

GitHub - SpecterOps/pass-the-passkey: Pass-the-Passkey Family of Attacks

GitHub - ivancabrera02/pyTGTdeleg

GitHub - dmcxblue/ANIMO: ANIMO Azure Network Intel & Mission Ops a C2 based on Azure/Entra assessments

GitHub - yassinmohamed1111/rodork: Interactive CLI Tool that automates Shodan discovery of unsecured robots, ROS nodes, cobots, and ICS. Shipped with 50+ targeted dorks, It can filter, score, and expo...

GitHub - mpgn/NetExec-mcp: NetExec MCP

GitHub - r1cksec/cheatsheets: Collection of knowledge about information security

GitHub - init1Security/PPKGPacker: Python scripts that helps in the development of PPKG binaries

GitHub - Whispergate/Sphinx: A litterbox integration for the Mythic Command and Control Server

GitHub - An0nUD4Y/Offensive-COM: Research notes on Windows Component Object Model (COM) attack surface for offensive security and vulnerability research. Covers COM hijacking, elevation of privilege, ...

GitHub - Kritt-ai/open-kritt: Orchestrate AI agents to find real vulnerabilities in code.

GitHub - haxxm0nkey/credshound: Nuclei-like credential surface scanner with BloodHound support. Audits local hosts for exposed secrets, cloud tokens, DevOps, and AI keys.

GitHub - nikaiw/VMkatz: Extract Windows credentials directly from VM memory snapshots and virtual disks