AutoPwnKey is a red teaming framework and testing tool using AutoHotKey (AHK), which at the time of creation proves to be quite evasive. It is our hope that this tool will be useful to red teams over the short term, while over the long term help AV/EDR vendors improve how they handle AHK scripts.
☆113Jul 21, 2025Updated last year
Alternatives and similar repositories for AutoPwnKey
Users that are interested in AutoPwnKey are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Listener that spawns a new tmux window for each incoming reverse shell + Supports listening on many ports☆60Jul 13, 2025Updated last year
- 🖥️ Windows 🚀 A Windows tool for emergency privacy: instantly deletes sensitive data and active logins to protect my information during …☆57Jul 5, 2026Updated 3 months ago
- Persist like a Dodder☆69May 19, 2025Updated last year
- BypassIT is a framework for covert malware delivery and post-exploitation using AutoIT for red / blue team self assessment.☆44Jul 6, 2025Updated last year
- BeaconatorC2 is a framework for red teaming and adversarial emulation, providing a full-featured management interface, along with a catal…☆101Sep 30, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Tool created for Red Team to test default credentials on SSH and WinRM and then execute scripts with those credentials before the passwor…☆40May 7, 2023Updated 3 years ago
- Utilizng an MCP Server to communicate with your C2☆95May 15, 2025Updated last year
- CISOinaBox is a free community framework to organize tools, templates, and resources to help equip new CISOs and set them up for success.…☆42Sep 19, 2026Updated last month
- ☆44Jul 17, 2025Updated last year
- Nakamoto is a 2 layer encryption tool to protect your data and your cyptocurrency☆16Oct 14, 2026Updated 2 weeks ago
- CTRL-ESC-HOST is an assessment methodology for testing for security flaws in Kiosks and Presented Applications.☆33Aug 8, 2026Updated 2 months ago
- Inboxfuscation is an advanced offensive & defensive framework for mailbox rule obfuscation and detection in Exchange environments.☆83Sep 11, 2025Updated last year
- Build sneaky & malicious LNK files.☆162Jul 16, 2025Updated last year
- Addon for BHCE☆58Apr 1, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Cobalt Strike beacon parser and crawler☆20Oct 11, 2026Updated 2 weeks ago
- AutoRMM is a collection of scripts and instructions we are organizing, to test delivery mechanisms for RMM and screen sharing tools, alo…☆93Aug 3, 2025Updated last year
- ADS (Apparition Delivery System) is a research framework for exploring stealthy Windows execution techniques using filesystem artifacts t…☆13Mar 15, 2026Updated 7 months ago
- ☆16Jan 9, 2025Updated last year
- ☆168Jul 6, 2026Updated 3 months ago
- Verified Entity Identity Lock (Expose hidden trust paths in your AWS IAM setup before they become security risks.)☆16Oct 14, 2026Updated 2 weeks ago
- PoC shadow SaaS and insecure credential detection system using a browser extension.☆44Aug 5, 2026Updated 2 months ago
- A Python script for creating `.lnk` (shortcut) files with embedded encoded data and packaging them into ZIP archives.☆93Jan 8, 2025Updated last year
- APT Emulation tool to exfiltrate sensitive .docx, .pptx, .xlsx, .pdf files☆102Apr 2, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Feed it a number. Your cloned voice does the social engineering, while you sip your coffee. A ghost that talks on the phone for you.☆127Jul 20, 2026Updated 3 months ago
- Detonate redteam tools on VMs and get logs & detection status☆107Updated this week
- Assortment of scripts and tools for our Blackhat EU 2024 talk☆107Feb 6, 2025Updated last year
- Script to check Azure Front Door WAF for insecure RemoteAddr variable☆30Jul 11, 2025Updated last year
- ☆30Oct 13, 2025Updated last year
- ☆82Apr 28, 2025Updated last year
- LudusHound is a tool for red and blue teams that transforms BloodHound data into a fully functional, Active Directory replica environment…☆385Sep 3, 2025Updated last year
- ☆23Mar 4, 2025Updated last year
- Red Team Collaboration Infrastructure☆97Apr 24, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- CaptainCredz is a modular and discreet password-spraying tool.☆141Aug 5, 2026Updated 2 months ago
- .NET Post-Exploitation Utility for Abusing Strong Explicit Certificate Mappings in ADCS☆160Feb 10, 2025Updated last year
- An index of publicly available and open-source threat detection rulesets.☆141Apr 17, 2025Updated last year
- ☆150Sep 9, 2025Updated last year
- A powerful Python library and CLI tool for parsing, analyzing, and manipulating YARA rules through Abstract Syntax Tree (AST) representat…☆54Oct 22, 2026Updated last week
- Deptective automatically determines the native dependencies required to run any arbitrary program or command.☆133Oct 22, 2026Updated last week
- Secrets Ninja is an GUI tool for validating & investigating API keys discovered during pentesting & bug bounty hunting.☆184Mar 5, 2026Updated 7 months ago