a unique framework for cybersecurity simulation and red teaming operations, windows auditing for newer vulnerabilities, misconfigurations and privilege escalations attacks, replicate the tactics and techniques of an advanced adversary in a network.

mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse

A tool to make socks connections through HTTP agents

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

.NET 4.0 WinRM API Command Execution

This tool can be used during internal penetration testing to dump Windows credentials from an already-compromised host. It allows one to dump SYSTEM, SECURITY and SAM hives and once copied to the attacker machines provides option to delete these files to clear the trace.

.NET 4.0 Scheduled Job Lateral Movement

Manipulating and Abusing Windows Access Tokens.

Invoke-KleptoKitty - Deploys Payloads and collects credentials

Self-developed tools for Lateral Movement/Code Execution

A CALDERA plugin

ssh.exe is available in windows 10 / server 2019 by default, let's LOLBAS it up!