Security Researcher at @SpecterOps
sccmhunter. SCCMHunter is a post-ex tool built to streamline identifying, profiling, and attacking SCCM related assets in an Active Directory domain.
927pre2k. A tool to query for the existence of pre-windows 2000 computer objects.
391aced. Python
200ldap_bofs. Random BOFs for LDAP tradecraft
74fustercluck. POC tool to abuse windows server failover clusters
56mssqlkaren. modified mssqlclient from impacket to extract policies from the SCCM database
46scomhunter. Python
40wtftp. wtftp.py is a tool to attack Microsoft Deployment Toolkit (MDT) and Windows Deployment Services (WDS).
34CVE-2025-59501. CVE-2025-59501 POC code
26SetZeroSync. Python
14NotSoSmartDeploy. POC to decrypt SmartDeploy encrypted credentials
12pre2k-TS. Python
10ludus_wsfc. An Ansible collection that installs a basic Windows Server Failover Cluster
9impacket. Impacket is a collection of Python classes for working with network protocols.
4dplooter. Python
4smsadmin. Python
3windows-coerced-authentication-methods. A list of methods to coerce a windows machine to authenticate to an attacker-controlled machine through a Remote Procedure Call (RPC) with various protocols.
3cloud-proxy. cloud-proxy creates multiple DO droplets and then starts local socks proxies using SSH
2adduser. Programmatically create an administrative user under Windows
2azurejwt. Python
2BloodHound.py. A Python based ingestor for BloodHound
2ldap_shell. AD ACL abuse
1ADGenerator. Active Directory Generator files for Movement, Pivoting, and Persistence for Pentesters and Ethical Hackers.
1DefaultCreds-cheat-sheet. One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️
1wmiexec-Pro. New generation of wmiexec.py
1Misconfiguration-Manager. Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.
1p0wnedShell. PowerShell Runspace Post Exploitation Toolkit
1PrivescCheck. Privilege Escalation Enumeration Script for Windows
1md4errors.
1screen-config.
1