A post exploitation framework for advanced Red Team operations
☆224Nov 10, 2026Updated this week
Alternatives and similar repositories for nukerat
Users that are interested in nukerat are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- WinRM pass-the-hash BOF with NTLMv2 authentication and signed, encrypted WSMan traffic☆21Updated this week
- A curated list of red team tools, C2 frameworks, and adversary simulation resources for offensive security professionals.☆27Oct 9, 2026Updated last month
- Mythic Agent to perform Breach & Attack Simulations☆35Updated this week
- Evasive fork of Donut to generate position-independent shellcode that loads PE Windows payloads from memory☆68Nov 6, 2026Updated last week
- The complete hacking & penetration testing roadmap. From beginner to elite. 44,982 lines, 150+ Diagram across the roadmap: OPSEC, web sec…☆195Updated this week
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- AI 自主渗透测试平台 · 多智能体自主渗透测试（二次开发自 ARTEX）☆594Oct 31, 2026Updated last week
- MCP server that executes shell commands and captures terminal output as styled PNG screenshots — perfect for pentest reports, documentati…☆14Updated this week
- A Position Independent Code (PIC) implementation of the execute-assembly command built with Crystal Palace.☆22Oct 4, 2026Updated last month
- ☆36Nov 1, 2026Updated last week
- A zero-symbol static analysis engine that extracts and mathematically ranks the Windows RPC attack surface using an AHP-based risk model.☆16Aug 26, 2026Updated 2 months ago
- ☆21Sep 2, 2026Updated 2 months ago
- Interactive Active Directory shell and attack toolkit over LDAP(S) or ADWS (SOAP) written in Rust. 🦀☆70Updated this week
- Engagement Manager is a web application for tracking offensive security engagements. It features a modern UI, built with Next.js, Prisma,…☆25Updated this week
- Linux UEFI bootkit and rootkit framework written in Rust☆195Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Remote process injection via TP_DIRECT.Callback hijack☆42Oct 30, 2026Updated last week
- ☆53Oct 4, 2026Updated last month
- LPE Proof-of-Concept for Windows 11 abusing TrustedInstaller's Component Based Servicing (CBS) session COM object and junctions for arbit…☆63Nov 1, 2026Updated last week
- OneDrive as a covert C2 transport for Cobalt Strike☆79Sep 19, 2026Updated last month
- Proxll is a tool designed to simplify the generation of proxy DLLs while addressing common conflicts related to windows.h☆41Oct 8, 2024Updated 2 years ago
- Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.☆69Oct 25, 2026Updated 2 weeks ago
- Cobalt Strike BOF that extracts selected Windows registry hives directly from a raw NTFS volume by parsing NTFS metadata and reading file…☆113Oct 11, 2026Updated last month
- Wire and behavioural de-fingerprinting patches for impacket and NetExec☆23Nov 5, 2026Updated last week
- Compose red team infrastructure and Active Directory ranges on a canvas, then compile to a complete Terraform and Ansible working directo…☆180Updated this week
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- krbrelayx fork that defeats enforced SMB signing on an SMB relay (opt-in --reauth-bypass).☆80Oct 21, 2026Updated 3 weeks ago
- Mythic Code Signing Wrapper☆20Oct 27, 2026Updated 2 weeks ago
- Demonstration of the DLL party process injection technique☆100Oct 1, 2026Updated last month
- C programs for sockets, reverse shell, shellcode execution, and process injection.☆25Dec 10, 2025Updated 11 months ago
- Tools for CES abuse☆51Sep 29, 2026Updated last month
- Clean Indirect Syscalls with Syscall Tampering.☆55Oct 25, 2026Updated 2 weeks ago
- Process ID Mutator via BYOVD Kernel R/W☆22Sep 6, 2026Updated 2 months ago
- POC for CVE-2025-54918 and a technical demonstration.☆64Jan 12, 2026Updated 10 months ago
- Cross-platform interactive shell for Microsoft Defender for Endpoint Live Response☆16Jun 23, 2026Updated 4 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscat…☆132Aug 22, 2026Updated 2 months ago
- Collect Defender Telemetry/Logs☆26Nov 4, 2026Updated last week
- A PoC of User-Defined Reflective Loader for Havoc Framework built with Cystal Palace☆50Oct 18, 2026Updated 3 weeks ago
- Hypervisor isolated shellcode execution environment. Maps host process memory into a guest vCPU, intercepts DLL execute faults, and proxi…☆77Nov 4, 2026Updated last week
- Find the fix that breaks the most routes to Domain Admin. Maps Active Directory attack paths with evidence, compares remediation options …☆98Updated this week
- artex 流程优化及落地，适配内网渗透/审核intent/漏洞挖掘/代码审计等多场景，可自定义编排。☆82Updated this week
- Malware as a Service Ludus Range☆143Sep 24, 2026Updated last month
Are these results useful?