Credential and sensitive-data exposure triage for file shares
☆16Aug 8, 2026Updated 2 months ago
Alternatives and similar repositories for sift
Users that are interested in sift are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- open-source pentest management built to be operated by an AI agent☆28Sep 1, 2026Updated last month
- Crystal Palace PICO loader for Sliver C2 dual-layer AMSI bypass, ETW silencing, AES-256-CBC encrypted payloads, 6 delivery variants☆47Aug 20, 2026Updated last month
- Windows BYOVD research on DCRCVDrv.sys and Alinubx.sys, reverse engineering their kernel primitives, IOCTL surfaces, and detection opport…☆38Oct 1, 2026Updated 2 weeks ago
- ☆37Sep 6, 2026Updated last month
- More than just an agent harness for pentesting, yet lightweight and transparent.☆42Oct 7, 2026Updated last week
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- an Improoved Version of 0xNinjaCyclone´s EarlyCascade Code☆22Feb 20, 2025Updated last year
- Modified BloodHound.py CE ingestor for red team use. Obfuscates LDAP through ldapx, paces LDAP searches and host RPC, and resumes a stopp…☆88Oct 10, 2026Updated last week
- Convert binaries to shellcode (C, C#, CPP, ASM, BOF loader, PS to b64)☆20Jun 6, 2025Updated last year
- How to Register your own AV with Defender☆37Aug 27, 2026Updated last month
- A practical client for ADWS in Golang.☆56Aug 5, 2026Updated 2 months ago
- Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscat…☆131Aug 22, 2026Updated last month
- AI red-teaming tool and LLM security framework to evaluate agentic AI applications. Tests prompt injections, handles vulnerability assess…☆65Updated this week
- Detection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers (audit/EDR/…☆67Aug 22, 2026Updated last month
- A technique that mixes NTDLL unhooking and hellsgate gate varients☆33Updated this week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Map your path from a low-priv user to roo, like BloodHound, for local Linux privesc.☆173Jul 31, 2026Updated 2 months ago
- POC tool for ResetNightmare (CVE-2026-27912)☆224Aug 20, 2026Updated last month
- Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026.☆61Jul 20, 2026Updated 2 months ago
- Nim-based encryption tool for obfuscating shellcode and payloads for evading Windows Defender.☆28Jul 14, 2026Updated 3 months ago
- SoK/Whitepaper on Offensive Operations against Active Directory Certificate Service☆31Aug 29, 2026Updated last month
- 🎒 An up-to-date collection of precompiled binaries and hacking scripts.☆50Oct 1, 2026Updated 2 weeks ago
- Kumo 蜘蛛 is a domain OSINT & security reconnaissance framework. Drop a domain, get everything back in real time across 27 parallel module…☆70Oct 9, 2026Updated last week
- WINFLESHER v2.0 - ATTACK SURFACE SECURITY FRAMEWORK☆26Sep 21, 2026Updated 3 weeks ago
- SOCKS-focused NTLM relay with persistent session packages and a long-lived SessionBank that owns authenticated TCP connections.☆41Aug 3, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Cloud dead-drop C2 framework — RSA-4096 + AES-256-GCM, 5 cloud providers, Rust-only agents, P2P mesh, persistence engine, credential harv…☆43Sep 9, 2026Updated last month
- Proof-of-Concept software for creating inbound AD forest trusts.☆21Jun 25, 2025Updated last year
- A desktop/web app for security engineers and Active Directory administrators to load, browse, compare, audit, and baseline-check Group Po…☆39Updated this week
- Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal☆57Sep 15, 2026Updated last month
- Cobalt Strike BOF that extracts selected Windows registry hives directly from a raw NTFS volume by parsing NTFS metadata and reading file…☆110Oct 11, 2026Updated last week
- A simple Go program that detects whether the current Windows system is running inside a Hyper-V virtual machine environment(Guest) using …☆11Oct 27, 2024Updated last year
- C# project to Reflectively load .Net assemblies in memory☆20Jun 19, 2024Updated 2 years ago
- Remote service-staging tool built on Impacket, designed for BOF-style lateral movement workflows that lets you upload custom service load…☆131Dec 7, 2025Updated 10 months ago
- PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.☆40Sep 20, 2026Updated 3 weeks ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.☆65Sep 11, 2026Updated last month
- Silent;Call — Pre-authentication remote root on Cisco CUCM 15.x (CVSS 10.0)☆29Aug 4, 2026Updated 2 months ago
- Pass-the-Passkey Family of Attacks☆233Sep 14, 2026Updated last month
- Supervised, Hermes-native penetration testing profile with 35 routed playbooks, guarded target execution, persistent engagement state, ev…☆153Updated this week
- Bypass llm guardrails by confusing it with fabricated tool output.☆534Sep 1, 2026Updated last month
- Windows network scanner that finds AI/ML services and MCP servers on your network (shadow AI discovery). Signed, self-updating detection …☆39Updated this week
- BOF exploiting the Visual Studio Installer Elevation Service for SYSTEM LPE and persistence via AppDomainManager hijacking, with native E…☆88Aug 5, 2026Updated 2 months ago