Skip to content

@xforcered X-Force Red

Change the repository type filter

All

    Repositories list

    34 repositories

    • m-RAY

      Public
      Python
      •
      GNU General Public License v3.0
      •0•5•3•0•Updated Jan 7, 2026Jan 7, 2026

    • wubblegum

      Public
      A smart card reconnaissance tool able to map out many different kinds of smart cards.
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •0•13•0•0•Updated Oct 21, 2025Oct 21, 2025

    • MLOKit

      Public
      MLOps Attack Toolkit
      C#
      •
      Apache License 2.0
      •11•29•0•0•Updated Aug 25, 2025Aug 25, 2025

    • PhrackCTF

      Public
      Binary Exploitation Phrack CTF Challenge
      C
      •12•139•0•0•Updated Aug 21, 2025Aug 21, 2025

    • Agent-Development-Stack

      Public
      Backend development stack for agents
      JavaScript
      •
      Other
      •4•29•0•0•Updated Jul 30, 2025Jul 30, 2025

    • RemoteMonologue

      Public
      Weaponizing DCOM for NTLM Authentication Coercions
      Python
      •42•275•0•0•Updated Jul 1, 2025Jul 1, 2025

    • ForsHops

      Public
      ForsHops
      C++
      •
      GNU General Public License v3.0
      •29•152•0•0•Updated Mar 25, 2025Mar 25, 2025

    • ADOKit

      Public
      Azure DevOps Services Attack Toolkit
      C#
      •
      Apache License 2.0
      •63•305•0•0•Updated Mar 15, 2025Mar 15, 2025

    • SoaPy

      Public
      SoaPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) from Linux hosts.
      Python
      •42•256•0•0•Updated Feb 21, 2025Feb 21, 2025

    • Being-A-Good-CLR-Host

      Public
      C
      •16•137•0•0•Updated Jan 16, 2025Jan 16, 2025

    • SQLRecon

      Public
      A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.
      C#
      •
      BSD 3-Clause "New" or "Revised" License
      •128•403•0•0•Updated Jan 10, 2025Jan 10, 2025

    • VectoredExceptionHandling

      Public
      C
      •14•35•0•0•Updated Aug 21, 2024Aug 21, 2024

    • BokuLoader

      Public
      A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!
      C
      •
      MIT License
      •268•336•0•0•Updated Jul 20, 2024Jul 20, 2024

    • DayBird

      Public
      Extension functionality for the NightHawk operator client
      C#
      •10•26•0•0•Updated Oct 31, 2023Oct 31, 2023

    • Windows_MSKSSRV_LPE_CVE-2023-36802

      Public
      LPE exploit for CVE-2023-36802
      C
      •42•24•0•0•Updated Oct 10, 2023Oct 10, 2023

    • BOFMask

      Public
      C
      •27•129•0•0•Updated Jun 28, 2023Jun 28, 2023

    • AdvSim.Cryptography

      Public
      Simple and sane cryptographic wrapper library.
      C#
      •
      MIT License
      •5•27•0•1•Updated Apr 21, 2023Apr 21, 2023

    • Windows_LPE_AFD_CVE-2023-21768

      Public
      LPE exploit for CVE-2023-21768
      C
      •168•423•0•0•Updated Mar 8, 2023Mar 8, 2023

    • AdvSim.Compression

      Public
      Simple and sane compression wrapper library.
      C#
      •2•9•0•0•Updated Oct 28, 2022Oct 28, 2022

    • SCMKit

      Public
      Source Code Management Attack Toolkit
      C#
      •
      Apache License 2.0
      •54•136•0•0•Updated Sep 20, 2022Sep 20, 2022

    • goEnum

      Public
      goEnum is a modular and system-agnostic enumeration framework
      Go
      •
      BSD 3-Clause "New" or "Revised" License
      •1•1•0•0•Updated Aug 17, 2022Aug 17, 2022

    • WFH

      Public
      Python
      •71•197•0•0•Updated Aug 17, 2022Aug 17, 2022

    • InvisibilityCloak

      Public
      Proof-of-concept obfuscation toolkit for C# post-exploitation tools
      Python
      •191•430•0•1•Updated Jul 22, 2022Jul 22, 2022

    • elfpack

      Public
      ELF Sectional docking payload injector system
      C++
      •10•21•0•0•Updated Jun 28, 2022Jun 28, 2022

    • CheckCert

      Public
      Obtain and parse SSL certificates
      C
      •11•10•0•1•Updated Mar 17, 2022Mar 17, 2022

    • xPipe

      Public
      Cobalt Strike BOF to list Windows Pipes & return their Owners & DACL Permissions
      C
      •25•53•0•0•Updated Dec 21, 2021Dec 21, 2021

    • scan4log4shell

      Public
      A Burp Pro extension that adds log4shell checks to Burp Scanner.
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •5•27•0•0•Updated Dec 12, 2021Dec 12, 2021

    • StandIn

      Public
      StandIn is a small .NET35/45 AD post-exploitation toolkit
      C#
      •136•257•0•0•Updated Dec 2, 2021Dec 2, 2021

    • GetWebDAVStatus

      Public
      Determine if the WebClient Service (WebDAV) is running on a remote system
      C
      •29•27•0•0•Updated Sep 29, 2021Sep 29, 2021

    • Detect-Hooks

      Public
      Proof of concept Beacon Object File (BOF) that attempts to detect userland hooks in place by AV/EDR
      C
      •30•103•0•0•Updated Jul 22, 2021Jul 22, 2021