The Shelf is a repository containing various tools, exploits, and scripts that I’ve gathered over the years. These are small but useful utilities for hacking, automation, and configurations that didn't justify their own repo but are too handy to lose. Useful for quick tasks, testing, or competitive hacking.
☆36Sep 22, 2026Updated 3 weeks ago
Alternatives and similar repositories for shelf
Users that are interested in shelf are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆27Dec 31, 2025Updated 9 months ago
- Enumerate Employees through OneDrive and Teams☆15Dec 15, 2025Updated 9 months ago
- Utility for ClickOnce usage for Red Teams.☆15Jun 11, 2026Updated 4 months ago
- Dumping LSASS Evaded Endpoint Security Solutions☆18Feb 15, 2025Updated last year
- Exploits a flaw in Remote Desktop Plus by monitoring and decrypting temporary .rdp files in %localappdata%/Temp, revealing credentials us…☆18Jul 3, 2025Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- This GitHub Action sends a reverse shell from a runner via Azure Storage Account blobs☆40Sep 25, 2024Updated 2 years ago
- CVE-2025-59501 POC code☆25Nov 20, 2025Updated 10 months ago
- Script to check Azure Front Door WAF for insecure RemoteAddr variable☆30Jul 11, 2025Updated last year
- ☆30Sep 9, 2026Updated last month
- CLI tool to interact with the BloodHound CE API☆79Jun 18, 2026Updated 3 months ago
- Brute Ratel External C2 (Microsoft Teams)☆38Dec 11, 2024Updated last year
- REcon 2024 Repo, slides for talk "GOP Complex: Image parsing bugs, EBC polymorphic engines and the Deus ex machina of UEFI exploit dev""☆14Mar 31, 2025Updated last year
- Exploitation of CVE-2025-29969☆68Feb 20, 2026Updated 7 months ago
- Styx is an cross-platform GUI interface for HackTheBox made in GoLang☆31Feb 8, 2026Updated 8 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A Python POC for CRED1 over SOCKS5☆173Oct 5, 2024Updated 2 years ago
- A vibe-coded port of wiretap☆37Apr 25, 2026Updated 5 months ago
- Tailscale/Headscale C2 profile and agent for Mythic☆34Mar 14, 2026Updated 6 months ago
- .Net Assembly loader for the GMSAPasswordReader☆23Feb 15, 2023Updated 3 years ago
- Parses cached certificate templates from a Windows Registry file and displays them in the same style as Certipy does☆98Jul 3, 2025Updated last year
- A portable console aimed at making pentesting with PowerShell a little easier.☆10Jun 9, 2016Updated 10 years ago
- Ludus roles to deploy ASR rules and MDI auditing settings☆25Aug 5, 2025Updated last year
- A curated collection of Living off the Land (LotL) attack demonstrations where trusted binaries go rogue, because if it didn’t launch cal…☆37Jan 7, 2026Updated 9 months ago
- Reversed cassandra source code for educational purposes☆36Jul 3, 2026Updated 3 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Tool to keep Track of Chromium Releases with automatic Commit detection for V8 bugs☆16Dec 4, 2025Updated 10 months ago
- some of the commands I usually use when doing HTB machines☆54Jan 1, 2024Updated 2 years ago
- This repo contains useful scripts that AI created for me which I would have been too lazy for☆105Jun 30, 2026Updated 3 months ago
- A tool for exploiting Kerberos tickets against system with Credential Guard enabled.☆22Sep 2, 2025Updated last year
- Chisel new generation, written in rust. SSH under WSS with some customization.☆135Jan 24, 2026Updated 8 months ago
- A credential extraction .NET assembly for Veeam Backup & Replication and Veeam One☆33May 14, 2026Updated 4 months ago
- ☆49Dec 5, 2025Updated 10 months ago
- ☆24Apr 18, 2025Updated last year
- Proof of concept for Kerberos Armoring abuse.☆87Dec 12, 2025Updated 10 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Generate malicious files using recently published homoglyphic-attack (CVE-2021-42694)☆18May 2, 2026Updated 5 months ago
- Impack-only implementation of WinRM protocol with support for NTLM and Kerberos auth☆140May 5, 2026Updated 5 months ago
- ☆165May 5, 2025Updated last year
- MDE/MDI Defender setup for Ludus☆62Jul 30, 2026Updated 2 months ago
- A practical client for ADWS in Golang.☆56Aug 5, 2026Updated 2 months ago
- Our Tips&Tricks☆164Aug 9, 2026Updated 2 months ago
- GoPhish-Deploy is an automated deployment script for the GoPhish phishing framework, configuring it with SSL and secure defaults.☆16Mar 20, 2025Updated last year