byt3bl33d3r

A swiss army knife for pentesting networks

Framework for Man-In-The-Middle attacks

My experiments in weaponizing Nim (https://nim-lang.org/)

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive...

Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient

A PoC backdoor that uses Gmail as a C&C server

A PrintNightmare (CVE-2021-34527) Python Scanner. Scan entire subnets for hosts vulnerable to the PrintNightmare RCE

Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.

Modified version of the passing-the-hash tool collection made to work straight out of the box

Toolbox containing research notes & PoC code for weaponizing .NET's DLR

Spoof emails from any of the +2 Million domains using MailChannels (DEFCON 31 Talk)

Python script to decrypt saved Chrome usernames and passwords on windows

Python interpreter for Cobalt Strike Malleable C2 Profiles. Allows you to parse, build and modify them programmatically.

Python clone of arpspoof that can poison hosts via arp-requests as well as arp-replies

A mirror of the original SSLstrip+ code by Leonardo Nve

DNSChef (NG) - DNS proxy for Penetration Testers and Malware Analysts

DLL sideloading/proxying with Nim!

A collection of Ansible Playbooks that configure Kali to use Fish & install a number of tools

Orchestrate fleets of Claude Code & Claude Computer Use agents across containers, VMs, and physical devices. Live desktop streaming, intelligent task delegation, and multi-channel...

Converts a USB Rubber ducky script into a Kali Nethunter friendly format for the HID attack

Slides from various talks that I've given over the years

Cobalt Strike BOF Files with Nim!

Spoofs a DHCP server and exploits all clients vulnerable to the 'ShellShock' bug

Python library that facilitates interfacing with BeEF via it's RESTful API

Generate graphs with NetworkX, natively visualize with D3.js and pywebview

A C# stager for SILENTTRINITY (https://github.com/byt3bl33d3r/SILENTTRINITY)

Loads the AutoIt DLL and PowerShell assemblies into memory and executes the specified keystrokes

A collection of modifed PowerShell Scripts for CrackMapExec (https://github.com/byt3bl33d3r/CrackMapExec)

Automatically get internetz from access points that have MAC based filtering enabled