-
SpecterOps
- Seattle
- http://twitter.com/tifkin_
-
coop Public
Forked from trailofbits/coopIsolated VM environment for running Claude Code and Codex
Rust Apache License 2.0 UpdatedSep 9, 2026 -
dreadnode-sdk Public
Forked from dreadnode/sdkDreadnode Strikes SDK
Python Apache License 2.0 UpdatedMay 27, 2026 -
ghidra_markdown_docs Public
Converts Ghidra's HTLM help files to markdown
-
raptor Public
Forked from gadievron/raptorRaptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we confi…
Python Other UpdatedMay 7, 2026 -
BloodHound Public
Forked from SpecterOps/BloodHoundSix Degrees of Domain Admin
Go Apache License 2.0 UpdatedMay 7, 2026 -
ida-pro-mcp Public
Forked from mrexodia/ida-pro-mcpAI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
Python MIT License UpdatedApr 15, 2026 -
Nemesis Public
Forked from SpecterOps/NemesisAn offensive data enrichment pipeline
Python BSD 3-Clause "New" or "Revised" License UpdatedJan 14, 2026 -
ghidra Public
Forked from NationalSecurityAgency/ghidraGhidra is a software reverse engineering (SRE) framework
Java Apache License 2.0 UpdatedDec 15, 2025 -
-
pdb-ripper Public
Forked from wongfei/pdb-ripperExtend dia2dump utility to generate cpp code from pdb
C++ UpdatedApr 30, 2025 -
SharpHoundCommon Public
Forked from SpecterOps/SharpHoundCommonCommon library used by SharpHound.
C# GNU General Public License v3.0 UpdatedMar 27, 2025 -
SharpHound Public
Forked from SpecterOps/SharpHoundC# Data Collector for BloodHound
C# GNU General Public License v3.0 UpdatedDec 20, 2024 -
DotNetDeserializationScanner Public
Scans for .NET Deserialization Bugs in .NET Assemblies
-
-
Random Public
Assorted scripts and one off things
-
SpoolSample Public
PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.
-
tribes-build-image Public
Docker image to build the Tribes source using the original build chain
-
RequestAADRefreshToken Public
-
RpcView Public
Forked from fengjixuchui/RpcViewRpcView is a free tool to explore and decompile Microsoft RPC interfaces
-
CS-Situational-Awareness-BOF Public
Forked from trustedsec/CS-Situational-Awareness-BOFSituational Awareness commands implemented using Beacon Object Files
C GNU General Public License v2.0 UpdatedNov 3, 2022 -
skaffold Public
Forked from GoogleContainerTools/skaffoldEasy and Repeatable Kubernetes Development
-
sandbox-attacksurface-analysis-tools Public
Forked from googleprojectzero/sandbox-attacksurface-analysis-toolsSet of tools to analyze Windows sandboxes for exposed attack surface.
-
Mythic Public
Forked from its-a-feature/MythicA collaborative, multi-platform, red teaming framework
-
chronology Public
Forked from SpecterOps/chronologySpecterOps Historical Records
BSD 3-Clause "New" or "Revised" License UpdatedOct 26, 2020 -
Seatbelt Public
Forked from GhostPack/SeatbeltSeatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.
-
WDACTools Public
Forked from mattifestation/WDACToolsA PowerShell module to facilitate building, configuring, deploying, and auditing Windows Defender Application Control (WDAC) policies
-
SharpDPAPI Public
Forked from GhostPack/SharpDPAPISharpDPAPI is a C# port of some Mimikatz DPAPI functionality.
-
SharpSearch Public
Forked from djhohnstein/SharpSearchSearch files for extensions as well as text within.
-
SharpShares Public
Forked from djhohnstein/SharpSharesEnumerate all network shares in the current domain. Also, can resolve names to IP addresses.
-
GetNTLMChallenge Public
Obtains a crackable hash for the current user account



