The GPOddity tool aims to automate gPCFileSysPath attack vectors to exploit vulnerable Group Policy Objects, including through NTLM relaying

A modern, standalone HTML-based search engine for CVE Proof of Concept (PoC). Almost every publicly available CVE PoC is included

godap <hostname or IP> -u <username> -p <password> -d <domain>
KRB5CCNAME=ticket.ccache godap <hostname or IP> -k -d <domain>
godap <hostname or IP> -k -u <username> -H <hash> -d <domain>

A Python port of Group3r — the Group Policy auditing tool by @mikeloss — that authenticates with impacket so it runs from Linux, plus a filterable single-file HTML report on top of the original output formats.

The goal is identical findings: the same finding reasons, details, triage levels and suppression behaviour as the C# original, from the same GPO data.

hack-browser-data dumpkeys -o keys.json
hack-browser-data archive -o browser-data.zip
hack-browser-data restore --keys keys.json --data-zip browser-data.zip

Yandex password decryption
MSIX/UWP browsers on Windows (Arc, DuckDuckGo)
list --detail no longer triggers decryption (much faster on big profiles)
Chrome 130+ cookie host_key prefix handled correctly
Linux v11 cipher prefix supported for Chromium decryption

Google Chrome
Chromium
Microsoft Edge
360 Speed
QQ
Brave
Opera
OperaGX
Vivaldi
Yandex
CocCoc
Firefox
Safari

hack-browser-data.exe -b all -f json --dir results --zip

hack-browser-data.exe -b chrome -p "C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default"

claude-red is a curated library of offensive security skills for the Claude. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQL injection to shellcode, EDR evasion to ADCS abuse

git clone https://github.com/SnailSploit/claude-red ~/.claude/skills/claude-red