SoK/Whitepaper on Offensive Operations against Active Directory Certificate Service
☆31Aug 29, 2026Updated 2 months ago
Alternatives and similar repositories for certificate-of-compromise
Users that are interested in certificate-of-compromise are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CVE-2026-36425 OPSWAT AppRemover (ardrv.sys) improper access control advisory☆30Jul 17, 2026Updated 3 months ago
- Nim-based encryption tool for obfuscating shellcode and payloads for evading Windows Defender.☆29Jul 14, 2026Updated 3 months ago
- ☆25Oct 27, 2026Updated 2 weeks ago
- A self-hosted, real-time collaborative workspace for offensive security assessments.☆42Feb 20, 2026Updated 8 months ago
- open-source pentest management built to be operated by an AI agent☆30Sep 1, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A foundational C library for building operationally credible offensive capabilities☆95Sep 21, 2026Updated last month
- A unified, interactive reference for Living Off The Land Binaries (LOLBAS & GTFOBins). Features a dynamic payload builder (LHOST/LPORT), …☆20Sep 13, 2026Updated last month
- Usermode detector that catches indirect syscalls. Traps Hell's Hall, Tartarus' Gate, RecycledGate, and VEH syscalls & Many more.☆91Jun 15, 2026Updated 4 months ago
- Token impersonation in PowerShell to execute under the context of another user.☆24Oct 14, 2025Updated last year
- Templates for developing your own listeners and agents for AdaptixC2.☆64Sep 6, 2026Updated 2 months ago
- ☆10Jun 14, 2025Updated last year
- Windows BYOVD research on DCRCVDrv.sys and Alinubx.sys, reverse engineering their kernel primitives, IOCTL surfaces, and detection opport…☆38Oct 27, 2026Updated 2 weeks ago
- Wonka is a sweet Windows tool that extracts Kerberos tickets from the Local Security Authority (LSA) cache. Like finding a ticket, but fo…☆177Jun 19, 2026Updated 4 months ago
- Reverse engineering analysis of PureRAT, a multi-stage RAT that executes via msbuild.exe and communicates with C2 servers at pure8s.ddnsf…☆19Sep 21, 2026Updated last month
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Another new coercion primitive with LPE - machine-account NTLM coercion from a non-admin user via Windows Store InstallService plugin res…☆89Jun 20, 2026Updated 4 months ago
- takes shellcode bad-bytes and banishes them, returning cleaned shellcode with preserved functionalities☆64Mar 1, 2026Updated 8 months ago
- Various techniques for exploiting Windows☆13Oct 12, 2023Updated 3 years ago
- Credential and sensitive-data exposure triage for file shares☆17Aug 8, 2026Updated 3 months ago
- DynLoader A modular Windows loader focused on EDR evasion Built with indirect syscall (Tartarus Gate / Hell’s Gate), Manual PE parsing …☆82Jul 10, 2026Updated 3 months ago
- shell script protector (obfuscation, embedded interpreter, DRM) - invisible to kernel tracing☆70Sep 23, 2026Updated last month
- Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxi…☆17Jul 27, 2026Updated 3 months ago
- A shellcode loader generator with support for multiple injection techniques, built for red team engagements.☆104Jul 1, 2026Updated 4 months ago
- Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.☆69Oct 25, 2026Updated 2 weeks ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆16May 3, 2024Updated 2 years ago
- My BloodHound custom queries☆26Jan 10, 2023Updated 3 years ago
- Protocol-Introspecting Chunk Adapter for Resilient Data☆20Updated this week
- Dump TGTs remotely and convert Windows' klist binary output to ccache.☆105Aug 6, 2026Updated 3 months ago
- A cross-platform, collaborative C2 for red-teaming. Agents are cross-compilable (e.g, you can generate Windows DLLs on Linux), cross-comp…☆23Mar 7, 2025Updated last year
- Active Directory security assessment in Rust: directory discovery, Tier-0 path analysis, supported validation, and evidence reporting.☆110Sep 25, 2026Updated last month
- ☆53Oct 4, 2026Updated last month
- The DCERPC only printerbug.py version☆234Oct 30, 2025Updated last year
- Encode shellcode as XML-looking data. Single-header C library with a two-stage PIC loader example.☆15Feb 11, 2026Updated 8 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Zero shot vulnerability discovery using LLMs☆12Feb 3, 2026Updated 9 months ago
- P³-Shellcode Loader is a loader that implements a code injection technique which leverages the Process Parameters structure as an executi…☆247Jul 8, 2026Updated 4 months ago
- Advanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advance…☆120Sep 17, 2026Updated last month
- ☆19Dec 25, 2025Updated 10 months ago
- Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.☆112Oct 27, 2026Updated 2 weeks ago
- Dump LSASS via physical memory read primitives in vulnerable kernel drivers☆345Feb 2, 2026Updated 9 months ago
- PolyEngine is an evasive PE packer designed for CTF challenges and low-level Windows security education. It focuses on bypassing EDR and …☆168Aug 6, 2026Updated 3 months ago
Are these results useful?