PhantomFS is a Windows honeypot that projects convincing decoy files — credentials, financials, SSH keys — into a virtual directory via ProjFS, then fires instant Event Log and Toast alerts the moment an attacker opens one.
☆72Aug 15, 2026Updated 2 months ago
Alternatives and similar repositories for PhantomFS
Users that are interested in PhantomFS are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Steal Net-NTLMv1 hashes for logged on users without dumping LSASS☆16May 11, 2026Updated 6 months ago
- Caeruleus is a Bluetooth Low Energy testing toolkit for Linux/BlueZ, implemented as a single Go binary. It covers the full interaction-to…☆60Sep 29, 2026Updated last month
- (STILL.. EDR-evading) Password hash dumper for MacOS☆21Jul 8, 2026Updated 4 months ago
- Kali365 - EvilTokens Replica☆76Jul 7, 2026Updated 4 months ago
- Azure RedOps is a offensive security toolkit for assessing the security posture of Microsoft Entra ID☆190Oct 18, 2026Updated 3 weeks ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- A command-line tool to mount SMB shares and scan them for secrets using NoseyParker.☆40Nov 4, 2026Updated last week
- The Azure Execution Tool☆158Feb 6, 2026Updated 9 months ago
- The home of the SDDLMaker☆29Jan 13, 2025Updated last year
- Ludus roles to deploy ASR rules and MDI auditing settings☆25Aug 5, 2025Updated last year
- Two WinForms GUI tools for enumerating, searching, and exfiltrating data from M365 environments using application-level OAuth tokens☆255Mar 4, 2026Updated 8 months ago
- Terms of Use Conditional Access M365 Evilginx Phishlet☆47Jun 23, 2025Updated last year
- ☆108Sep 18, 2026Updated last month
- The DCERPC only printerbug.py version☆234Oct 30, 2025Updated last year
- Unprivileged endpoint deception for macOS and Linux workstations. Uses FIFO baits, other local traps, and protected sessions to detect se…☆26Jul 12, 2026Updated 4 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Sparkle - LLM Honeypot for Security Research☆14Jul 28, 2026Updated 3 months ago
- Interactive PowerShell framework for testing WMI, COM, LOLBAS, and persistence techniques☆132Dec 28, 2025Updated 10 months ago
- TokenCert☆105Nov 15, 2024Updated last year
- ☆15Jul 10, 2025Updated last year
- AI Deception Layer for - containing adversarial context designed to redirect or confuse an LLM agent reading your own infrastructure☆15Jun 23, 2026Updated 4 months ago
- Interact with Windows RPC Services over SMB using go-smb☆11Jul 6, 2026Updated 4 months ago
- Exploit AD CS misconfiguration allowing privilege escalation and persistence from any child domain to full forest compromise☆136Dec 2, 2023Updated 2 years ago
- ☆40Sep 25, 2026Updated last month
- ☆29Oct 5, 2026Updated last month
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Serving payloads only to allowed processes using Windows projected file system feature☆26Feb 7, 2026Updated 9 months ago
- Modular Go framework for attack surface management, reconnaissance, and vulnerability scanning.☆167Jul 6, 2026Updated 4 months ago
- Dump TGTs remotely and convert Windows' klist binary output to ccache.☆105Aug 6, 2026Updated 3 months ago
- MAPS cloud scanner and response parser for Microsoft Defender research.☆96Feb 19, 2026Updated 8 months ago
- Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀☆78Oct 10, 2026Updated last month
- The Kerberoasting / AD password-audit wordlist I use on engagements: priority-merged HashMob large list + The-Viper-One's kerberoast_pws,…☆16Oct 2, 2026Updated last month
- Ludus range for the Constructing Defense Lab☆144Jul 28, 2026Updated 3 months ago
- A tool to modify SCCM remote control settings on the client machine, enabling remote control without permission prompts or notifications.…☆121Oct 20, 2024Updated 2 years ago
- An Ansible collection that installs an SCCM deployment with optional configurations.☆109Dec 8, 2025Updated 11 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- CVE-2025-59501 POC code☆26Nov 20, 2025Updated 11 months ago
- e(X)tensiable (Rust) Malware Toolkit: (Soon!) Full Featured Rust C2 Framework with Awesome Features!☆28Oct 2, 2026Updated last month
- Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv…☆115Oct 6, 2026Updated last month
- ☆19Dec 25, 2025Updated 10 months ago
- Utility for ClickOnce usage for Red Teams.☆15Jun 11, 2026Updated 5 months ago
- Rust rewrite of nanodump, a low-level LSASS memory dumping tool.☆16Feb 22, 2026Updated 8 months ago
- Always-on, cross-platform telemetry daemon for AI agent activity. Sysmon for AI agents.☆63Jul 28, 2026Updated 3 months ago
Are these results useful?