The Shelf is a repository containing various tools, exploits, and scripts that I’ve gathered over the years. These are small but useful utilities for hacking, automation, and configurations that didn't justify their own repo but are too handy to lose. Useful for quick tasks, testing, or competitive hacking.
☆36Feb 16, 2026Updated 7 months ago
Alternatives and similar repositories for shelf
Users that are interested in shelf are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆27Dec 31, 2025Updated 8 months ago
- Enumerate Employees through OneDrive and Teams☆15Dec 15, 2025Updated 9 months ago
- Utility for ClickOnce usage for Red Teams.☆15Jun 11, 2026Updated 3 months ago
- Dumping LSASS Evaded Endpoint Security Solutions☆18Feb 15, 2025Updated last year
- Exploits a flaw in Remote Desktop Plus by monitoring and decrypting temporary .rdp files in %localappdata%/Temp, revealing credentials us…☆18Jul 3, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- This GitHub Action sends a reverse shell from a runner via Azure Storage Account blobs☆40Sep 25, 2024Updated last year
- CVE-2025-59501 POC code☆25Nov 20, 2025Updated 10 months ago
- Script to check Azure Front Door WAF for insecure RemoteAddr variable☆30Jul 11, 2025Updated last year
- ☆30Sep 9, 2026Updated 2 weeks ago
- CLI tool to interact with the BloodHound CE API☆79Jun 18, 2026Updated 3 months ago
- Brute Ratel External C2 (Microsoft Teams)☆38Dec 11, 2024Updated last year
- REcon 2024 Repo, slides for talk "GOP Complex: Image parsing bugs, EBC polymorphic engines and the Deus ex machina of UEFI exploit dev""☆14Mar 31, 2025Updated last year
- Exploitation of CVE-2025-29969☆68Feb 20, 2026Updated 7 months ago
- Styx is an cross-platform GUI interface for HackTheBox made in GoLang☆32Feb 8, 2026Updated 7 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- A Python POC for CRED1 over SOCKS5☆172Oct 5, 2024Updated last year
- A vibe-coded port of wiretap☆36Apr 25, 2026Updated 4 months ago
- Tailscale/Headscale C2 profile and agent for Mythic☆34Mar 14, 2026Updated 6 months ago
- .Net Assembly loader for the GMSAPasswordReader☆25Feb 15, 2023Updated 3 years ago
- A portable console aimed at making pentesting with PowerShell a little easier.☆10Jun 9, 2016Updated 10 years ago
- Parses cached certificate templates from a Windows Registry file and displays them in the same style as Certipy does☆96Jul 3, 2025Updated last year
- Ludus roles to deploy ASR rules and MDI auditing settings☆25Aug 5, 2025Updated last year
- A curated collection of Living off the Land (LotL) attack demonstrations where trusted binaries go rogue, because if it didn’t launch cal…☆37Jan 7, 2026Updated 8 months ago
- Reversed cassandra source code for educational purposes☆36Jul 3, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Tool to keep Track of Chromium Releases with automatic Commit detection for V8 bugs☆16Dec 4, 2025Updated 9 months ago
- some of the commands I usually use when doing HTB machines☆55Jan 1, 2024Updated 2 years ago
- A credential extraction .NET assembly for Veeam Backup & Replication and Veeam One☆32May 14, 2026Updated 4 months ago
- This repo contains useful scripts that AI created for me which I would have been too lazy for☆105Jun 30, 2026Updated 2 months ago
- A tool for exploiting Kerberos tickets against system with Credential Guard enabled.☆20Sep 2, 2025Updated last year
- Chisel new generation, written in rust. SSH under WSS with some customization.☆135Jan 24, 2026Updated 7 months ago
- ☆50Dec 5, 2025Updated 9 months ago
- ☆24Apr 18, 2025Updated last year
- Proof of concept for Kerberos Armoring abuse.☆87Dec 12, 2025Updated 9 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Generate malicious files using recently published homoglyphic-attack (CVE-2021-42694)☆18May 2, 2026Updated 4 months ago
- Impack-only implementation of WinRM protocol with support for NTLM and Kerberos auth☆139May 5, 2026Updated 4 months ago
- ☆166May 5, 2025Updated last year
- MDE/MDI Defender setup for Ludus☆62Jul 30, 2026Updated last month
- A practical client for ADWS in Golang.☆56Aug 5, 2026Updated last month
- Our Tips&Tricks☆164Aug 9, 2026Updated last month
- GoPhish-Deploy is an automated deployment script for the GoPhish phishing framework, configuring it with SSL and secure defaults.☆15Mar 20, 2025Updated last year