The Shelf is a repository containing various tools, exploits, and scripts that I’ve gathered over the years. These are small but useful utilities for hacking, automation, and configurations that didn't justify their own repo but are too handy to lose. Useful for quick tasks, testing, or competitive hacking.
☆36Feb 16, 2026Updated 5 months ago
Alternatives and similar repositories for shelf
Users that are interested in shelf are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆26Dec 31, 2025Updated 6 months ago
- Enumerate Employees through OneDrive and Teams☆15Dec 15, 2025Updated 7 months ago
- Utility for ClickOnce usage for Red Teams.☆15Jun 11, 2026Updated last month
- Dumping LSASS Evaded Endpoint Security Solutions☆19Feb 15, 2025Updated last year
- Exploits a flaw in Remote Desktop Plus by monitoring and decrypting temporary .rdp files in %localappdata%/Temp, revealing credentials us…☆18Jul 3, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- This GitHub Action sends a reverse shell from a runner via Azure Storage Account blobs☆40Sep 25, 2024Updated last year
- CVE-2025-59501 POC code☆25Nov 20, 2025Updated 8 months ago
- Script to check Azure Front Door WAF for insecure RemoteAddr variable☆30Jul 11, 2025Updated last year
- ☆29Mar 24, 2026Updated 4 months ago
- CLI tool to interact with the BloodHound CE API☆77Jun 18, 2026Updated last month
- REcon 2024 Repo, slides for talk "GOP Complex: Image parsing bugs, EBC polymorphic engines and the Deus ex machina of UEFI exploit dev""☆14Mar 31, 2025Updated last year
- Brute Ratel External C2 (Microsoft Teams)☆38Dec 11, 2024Updated last year
- Exploitation of CVE-2025-29969☆67Feb 20, 2026Updated 5 months ago
- Styx is an cross-platform GUI interface for HackTheBox made in GoLang☆31Feb 8, 2026Updated 5 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- A Python POC for CRED1 over SOCKS5☆172Oct 5, 2024Updated last year
- A vibe-coded port of wiretap☆35Apr 25, 2026Updated 2 months ago
- .Net Assembly loader for the GMSAPasswordReader☆24Feb 15, 2023Updated 3 years ago
- A portable console aimed at making pentesting with PowerShell a little easier.☆10Jun 9, 2016Updated 10 years ago
- Parses cached certificate templates from a Windows Registry file and displays them in the same style as Certipy does☆96Jul 3, 2025Updated last year
- Tailscale/Headscale C2 profile and agent for Mythic☆25Mar 14, 2026Updated 4 months ago
- Ludus roles to deploy ASR rules and MDI auditing settings☆25Aug 5, 2025Updated 11 months ago
- A curated collection of Living off the Land (LotL) attack demonstrations where trusted binaries go rogue, because if it didn’t launch cal…☆37Jan 7, 2026Updated 6 months ago
- A credential extraction .NET assembly for Veeam Backup & Replication and Veeam One☆30May 14, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Reversed cassandra source code for educational purposes☆28Jul 3, 2026Updated 3 weeks ago
- Tool to keep Track of Chromium Releases with automatic Commit detection for V8 bugs☆16Dec 4, 2025Updated 7 months ago
- some of the commands I usually use when doing HTB machines☆55Jan 1, 2024Updated 2 years ago
- This repo contains useful scripts that AI created for me which I would have been too lazy for☆99Jun 30, 2026Updated 3 weeks ago
- A tool for exploiting Kerberos tickets against system with Credential Guard enabled.☆15Sep 2, 2025Updated 10 months ago
- Chisel new generation, written in rust. SSH under WSS with some customization.☆133Jan 24, 2026Updated 6 months ago
- ☆50Dec 5, 2025Updated 7 months ago
- ☆24Apr 18, 2025Updated last year
- Generate malicious files using recently published homoglyphic-attack (CVE-2021-42694)☆18May 2, 2026Updated 2 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Proof of concept for Kerberos Armoring abuse.☆86Dec 12, 2025Updated 7 months ago
- Impack-only implementation of WinRM protocol with support for NTLM and Kerberos auth☆139May 5, 2026Updated 2 months ago
- ☆165May 5, 2025Updated last year
- MDE/MDI Defender setup for Ludus☆61Mar 14, 2026Updated 4 months ago
- A practical client for ADWS in Golang.☆54Jun 26, 2026Updated 3 weeks ago
- Our Tips&Tricks☆153Mar 4, 2026Updated 4 months ago
- GoPhish-Deploy is an automated deployment script for the GoPhish phishing framework, configuring it with SSL and secure defaults.☆15Mar 20, 2025Updated last year