The Shelf is a repository containing various tools, exploits, and scripts that I’ve gathered over the years. These are small but useful utilities for hacking, automation, and configurations that didn't justify their own repo but are too handy to lose. Useful for quick tasks, testing, or competitive hacking.
☆36Feb 16, 2026Updated 6 months ago
Alternatives and similar repositories for shelf
Users that are interested in shelf are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆27Dec 31, 2025Updated 8 months ago
- Enumerate Employees through OneDrive and Teams☆15Dec 15, 2025Updated 8 months ago
- Utility for ClickOnce usage for Red Teams.☆15Jun 11, 2026Updated 2 months ago
- Dumping LSASS Evaded Endpoint Security Solutions☆19Feb 15, 2025Updated last year
- Exploits a flaw in Remote Desktop Plus by monitoring and decrypting temporary .rdp files in %localappdata%/Temp, revealing credentials us…☆18Jul 3, 2025Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- This GitHub Action sends a reverse shell from a runner via Azure Storage Account blobs☆40Sep 25, 2024Updated last year
- CVE-2025-59501 POC code☆25Nov 20, 2025Updated 9 months ago
- Script to check Azure Front Door WAF for insecure RemoteAddr variable☆30Jul 11, 2025Updated last year
- ☆29Mar 24, 2026Updated 5 months ago
- CLI tool to interact with the BloodHound CE API☆78Jun 18, 2026Updated 2 months ago
- REcon 2024 Repo, slides for talk "GOP Complex: Image parsing bugs, EBC polymorphic engines and the Deus ex machina of UEFI exploit dev""☆14Mar 31, 2025Updated last year
- Brute Ratel External C2 (Microsoft Teams)☆38Dec 11, 2024Updated last year
- Exploitation of CVE-2025-29969☆69Feb 20, 2026Updated 6 months ago
- Styx is an cross-platform GUI interface for HackTheBox made in GoLang☆32Feb 8, 2026Updated 6 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A Python POC for CRED1 over SOCKS5☆172Oct 5, 2024Updated last year
- A vibe-coded port of wiretap☆36Apr 25, 2026Updated 4 months ago
- .Net Assembly loader for the GMSAPasswordReader☆25Feb 15, 2023Updated 3 years ago
- A portable console aimed at making pentesting with PowerShell a little easier.☆10Jun 9, 2016Updated 10 years ago
- Parses cached certificate templates from a Windows Registry file and displays them in the same style as Certipy does☆96Jul 3, 2025Updated last year
- Tailscale/Headscale C2 profile and agent for Mythic☆34Mar 14, 2026Updated 5 months ago
- Ludus roles to deploy ASR rules and MDI auditing settings☆25Aug 5, 2025Updated last year
- A curated collection of Living off the Land (LotL) attack demonstrations where trusted binaries go rogue, because if it didn’t launch cal…☆37Jan 7, 2026Updated 7 months ago
- A credential extraction .NET assembly for Veeam Backup & Replication and Veeam One☆31May 14, 2026Updated 3 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Reversed cassandra source code for educational purposes☆35Jul 3, 2026Updated last month
- Tool to keep Track of Chromium Releases with automatic Commit detection for V8 bugs☆16Dec 4, 2025Updated 8 months ago
- some of the commands I usually use when doing HTB machines☆55Jan 1, 2024Updated 2 years ago
- This repo contains useful scripts that AI created for me which I would have been too lazy for☆105Jun 30, 2026Updated 2 months ago
- A tool for exploiting Kerberos tickets against system with Credential Guard enabled.☆20Sep 2, 2025Updated last year
- Chisel new generation, written in rust. SSH under WSS with some customization.☆136Jan 24, 2026Updated 7 months ago
- ☆50Dec 5, 2025Updated 8 months ago
- ☆24Apr 18, 2025Updated last year
- Generate malicious files using recently published homoglyphic-attack (CVE-2021-42694)☆18May 2, 2026Updated 4 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Proof of concept for Kerberos Armoring abuse.☆87Dec 12, 2025Updated 8 months ago
- Impack-only implementation of WinRM protocol with support for NTLM and Kerberos auth☆139May 5, 2026Updated 3 months ago
- ☆165May 5, 2025Updated last year
- MDE/MDI Defender setup for Ludus☆62Jul 30, 2026Updated last month
- A practical client for ADWS in Golang.☆55Aug 5, 2026Updated 3 weeks ago
- Our Tips&Tricks☆163Aug 9, 2026Updated 3 weeks ago
- GoPhish-Deploy is an automated deployment script for the GoPhish phishing framework, configuring it with SSL and secure defaults.☆15Mar 20, 2025Updated last year