The Shelf is a repository containing various tools, exploits, and scripts that I’ve gathered over the years. These are small but useful utilities for hacking, automation, and configurations that didn't justify their own repo but are too handy to lose. Useful for quick tasks, testing, or competitive hacking.
☆36Sep 22, 2026Updated last month
Alternatives and similar repositories for shelf
Users that are interested in shelf are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 🥱😴🛌💤☆21Jun 21, 2026Updated 4 months ago
- ☆27Dec 31, 2025Updated 10 months ago
- Enumerate Employees through OneDrive and Teams☆15Dec 15, 2025Updated 10 months ago
- A Mythic C2 Profile that uses AWS S3 for command and control communication with per-execution credential isolation.☆15Mar 14, 2026Updated 7 months ago
- ☆32Oct 22, 2026Updated last week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Exploits a flaw in Remote Desktop Plus by monitoring and decrypting temporary .rdp files in %localappdata%/Temp, revealing credentials us…☆18Jul 3, 2025Updated last year
- ☆22Jun 28, 2026Updated 4 months ago
- Tailscale/Headscale C2 profile and agent for Mythic☆35Mar 14, 2026Updated 7 months ago
- A small set of Beacon Object Files (BOFs) that I developed over the time with a Magic: The Gathering theme.☆22Jul 15, 2025Updated last year
- Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀☆77Oct 10, 2026Updated 3 weeks ago
- CVE-2026-66804 Windows Cross Device virtual camera EoP - Standard user to SYSTEM☆25Aug 13, 2026Updated 2 months ago
- a strictly RFC 4510 conforming LDAP V3 pure Python client. The same codebase works with Python 2. Python 3, PyPy and PyPy3☆10Apr 19, 2025Updated last year
- Utility for ClickOnce usage for Red Teams.☆15Jun 11, 2026Updated 4 months ago
- sigreturn-oriented(SROP) based sleep obfuscation poc for Linux☆70Dec 15, 2025Updated 10 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability☆24Feb 5, 2025Updated last year
- Dumping LSASS Evaded Endpoint Security Solutions☆19Feb 15, 2025Updated last year
- ☆14Oct 7, 2025Updated last year
- From Zero To Hero☆35Apr 15, 2026Updated 6 months ago
- Brute Ratel External C2 (Microsoft Teams)☆38Dec 11, 2024Updated last year
- A vibe-coded port of wiretap☆37Apr 25, 2026Updated 6 months ago
- A collection of DPAPI hunting and parsing BOFs☆39Mar 3, 2026Updated 7 months ago
- This GitHub Action sends a reverse shell from a runner via Azure Storage Account blobs☆39Sep 25, 2024Updated 2 years ago
- Experimentations with the MSBuild Capabilites in a default environment.☆24Dec 6, 2025Updated 10 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A collection of useful API endpoints for security operators and administrators☆15Jan 8, 2026Updated 9 months ago
- A modern, scalable web application for obfuscating prompts to bypass AI detection systems.☆32Nov 5, 2025Updated 11 months ago
- A Python POC for CRED1 over SOCKS5☆173Oct 5, 2024Updated 2 years ago
- Request device ticket/token using the device's MSA☆38Aug 25, 2025Updated last year
- Lightweight binary that joins a device to a Tailscale network and exposes a local SOCKS5 proxy. Designed for red team operations and ephe…☆574Oct 3, 2025Updated last year
- Chisel new generation, written in rust. SSH under WSS with some customization.☆138Jan 24, 2026Updated 9 months ago
- CLI tool to interact with the BloodHound CE API☆79Updated this week
- A practical client for ADWS in Golang.☆56Aug 5, 2026Updated 2 months ago
- ☆37May 19, 2026Updated 5 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- The swiss army knife of LSASS dumping☆14Jan 4, 2026Updated 9 months ago
- SCEP request tool for AD CS and Intune☆78Oct 24, 2025Updated last year
- ☆166May 5, 2025Updated last year
- MDE/MDI Defender setup for Ludus☆62Jul 30, 2026Updated 3 months ago
- ☆94Aug 5, 2026Updated 2 months ago
- Impack-only implementation of WinRM protocol with support for NTLM and Kerberos auth☆142May 5, 2026Updated 5 months ago
- CVE-2025-59501 POC code☆26Nov 20, 2025Updated 11 months ago