Living Off the Land Credentials. Public credential defaults, locations, and exposure patterns for real products, SaaS/cloud services, appliances, and deployment packages.
☆61Jul 19, 2026Updated 3 months ago
Alternatives and similar repositories for lolcreds-data
Users that are interested in lolcreds-data are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Nuclei-like credential surface scanner with BloodHound support. Audits local hosts for exposed secrets, cloud tokens, DevOps, and AI keys…☆85Jul 21, 2026Updated 3 months ago
- L0phtCrack 7 macOS fork — Apple Silicon port with hashcat engine (M1/M2/M3/M4)☆29Mar 31, 2026Updated 6 months ago
- ☆33Apr 14, 2026Updated 6 months ago
- Asynchronous recon toolkit — subdomain enumeration, port/TLS/WAF scanning, WHOIS profiling and full mail-security audit (SPF, DKIM, DMARC…☆31May 21, 2026Updated 5 months ago
- Encode shellcode as XML-looking data. Single-header C library with a two-stage PIC loader example.☆15Feb 11, 2026Updated 8 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆94Aug 5, 2026Updated 2 months ago
- Evasive loader for .NET Framework assemblies☆53May 14, 2026Updated 5 months ago
- A collection of DPAPI hunting and parsing BOFs☆39Mar 3, 2026Updated 7 months ago
- Convert HTTP requests into API spec☆14Feb 14, 2026Updated 8 months ago
- PwnRM is an operator-grade Active Directory post-exploitation platform engineered directly upon the native Microsoft PowerShell Remoting …☆93Sep 4, 2026Updated last month
- This repository is for the Testing ASP.NET ViewState with YSoNet (YSoSerial.NET) workshop.☆25Dec 17, 2025Updated 10 months ago
- ☆107Sep 18, 2026Updated last month
- Activation Context Hijacking Evasion Tool☆314Jun 17, 2026Updated 4 months ago
- Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscat…☆131Aug 22, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆40Jun 4, 2026Updated 4 months ago
- Alternative Read and Write primitives using Rtl* functions the unintended way.☆79Aug 25, 2025Updated last year
- MCPwned is a companion extension that enables pentesters to effectively test MCP servers. It recognizes MCP-like endpoints, provies a sca…☆20Sep 28, 2026Updated 3 weeks ago
- Offset Independent Credential Extraction Tool☆71Sep 2, 2025Updated last year
- BloodHound Collector for FreeIPA. Attackers think in graphs... — true for Linux as well!☆46Aug 24, 2026Updated last month
- Modified version of PEAS client for offensive operations☆49May 18, 2026Updated 5 months ago
- Деобфускатор Bitrix☆21Feb 26, 2026Updated 7 months ago
- Rust-powered HTTP Request Smuggling Scanner.☆134Updated this week
- A Selenium scraper for public domain search tools.☆18Oct 27, 2024Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- find dll base addresses without PEB WALK☆171Jul 13, 2025Updated last year
- AdaptixC2 Templates☆37Apr 10, 2026Updated 6 months ago
- Automated DLL Hijacking Discovery, Validation, and Confirmation. Turning local misconfigurations into weaponized, confirmed attack paths.☆408Sep 17, 2026Updated last month
- Living of the Land of Free SaaS☆86Mar 22, 2026Updated 7 months ago
- Execute commands, in/exfiltrate files using your custom RPC Server☆74Jan 13, 2026Updated 9 months ago
- Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026.☆61Jul 20, 2026Updated 3 months ago
- A Bloodhound alternative. BloodBash will ingest the same files bloodhound does but no server is required to use this tool. It's great for…☆498Oct 6, 2026Updated 2 weeks ago
- Silent;Call — Pre-authentication remote root on Cisco CUCM 15.x (CVSS 10.0)☆29Aug 4, 2026Updated 2 months ago
- In-memory BOF implementation of Silent Process Exit LSASS dump via RtlReportSilentProcessExit☆19Apr 14, 2026Updated 6 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A way to maintain long-term access to Windows LAPS for lateral movement in AD via installing an Offensive LAPS RPC backdoor on a DC.☆32Jun 9, 2025Updated last year
- ☆11Dec 22, 2023Updated 2 years ago
- A BOF designed to inspect processes memory and addresses☆42Apr 19, 2026Updated 6 months ago
- Research on a new PoC for a Windows Sandbox .wsb HostFolder UNC path primitive that causes the host to authenticate over SMB and leak Net…☆32Jun 21, 2026Updated 4 months ago
- Async BOF to capture KeePass master passwords by detecting and keylogging locked database windows.☆51Jul 23, 2026Updated 3 months ago
- Automating the MITM attack on WSUS☆414Updated this week
- ☆15Oct 17, 2025Updated last year