synacktiv

HopLa Burp Suite Extender plugin - Brings AI capabilities, autocompletion support, and a set of useful payloads to Burp Suite

Frida-based tracer for easier reverse-engineering on Android, iOS, Linux, Windows and most related architectures.

The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).

Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently supports Azure DevOps, GitHub and GitLab.

gpoParser is a tool designed to extract and analyze configurations applied through Group Policy Objects (GPOs) in an Active Directory environment.

Enemies Of Symfony - Debug mode Symfony looter

A CLI to exploit parameters vulnerable to PHP filter chain error based oracle.

Group Policy Objects manipulation and exploitation framework

DCOM in memory and fileless lateral movement techniques through .Net deserilization

SCCMSecrets.py aims at exploiting SCCM policies distribution for credentials harvesting, initial access and lateral movement.

Octoscan is a static vulnerability scanner for GitHub action workflows.

Azure mindmap for penetration tests

PoC exploiting Aligned Chunk Confusion on Windows kernel Segment Heap

Local server for IDA Lumina feature

Finding Java/C# gadget chains with CodeQL

Systemd Hardening Helper - Mirror of https://github.com/desbma/shh

A PowerShell script to perform PKINIT authentication with the Windows API from a non domain-joined machine.

Local & remote Windows DLL Proxying

Pwn2Own Vancouver 2023 Ubuntu LPE exploit

The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning

A tool designed to exploit CVE-2025-54068 and Remote Command Execution if the APP_KEY of the Livewire project is known.

A tool designed to exploit bad implementations of decryption mechanisms in Laravel applications.

CaptainCredz is a modular and discreet password-spraying tool.

IPSpinner works as a local proxy that redirects requests through external services.

Machine-learn password mangling rules

Virtual machines manipulation framework

A SOCKS proxy for Citrix.

bbs is a router for SOCKS and HTTP proxies. It exposes a SOCKS5 (or HTTP CONNECT) service and forwards incoming requests to proxies or chains of proxies based on the request's target. Routing can...

Ruby-SAML / GitLab Authentication Bypass (CVE-2024-45409) exploit

Proof of concepts demonstrating some aspects of the Windows kernel shadow stack mitigation.

VMX intrinsics plugin for Hex-Rays decompiler

Python3 rewrite of AsOutsider features of AADInternals

Webkit exploit that give arbitrary R/W on 6.XX PS4 firmwares

Debugger for the Shannon Baseband

Dump Kerberos tickets from the KCM database of SSSD

Radmin Server 3 credentials dumper/cracker

Win32 keylogger that supports all (non-ime using) languages correctly

"Two-Face" Rust binary on Linux

Burp extension to filter JSON on the fly with JQ queries in the HTTP message viewer.