mc

headi. Customisable and automated HTTP header injection

FormThief. Spoofing desktop login applications with WinForms and WPF

Graphpython. Modular cross-platform Microsoft Graph API (Entra, o365, and Intune) enumeration and exploitation toolkit

ASRenum-BOF. Cobalt Strike BOF that identifies Attack Surface Reduction (ASR) rules, actions, and exclusion locations

EDRenum-BOF. Identify common EDR processes, directories, and services. Simple BOF of Invoke-EDRChecker.

proctools. Small toolkit for extracting information and dumping sensitive strings from Windows processes

SharpGraphView. Microsoft Graph API post-exploitation toolkit

SharpSQL. Simple C# implementation of PowerUpSQL

huntsman. Email enumerator, username generator, and context validator for hunter.io, snov.io, and skrapp.io

SigFinder. Identify binaries with Authenticode digital signatures signed to an internal CA/domain

clovery. Cloud Discovery - brute force public AWS, GCP, Alibaba, and Azure cloud services

Awesome-Advanced-Windows-Exploitation-References. List of Awesome Advanced Windows Exploitation References