coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 9 methods.

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

commix

Automated All-in-One OS Command Injection Exploitation Tool.

confuserex

An open-source, free protector for .NET applications

conptyshell

ConPtyShell - Fully Interactive Reverse Shell for Windows

convert-outlook-msg-file

Python library to convert Microsoft Outlook .msg files to .eml/MIME message files.

cook

An overpower wordlist generator.

copycat

Simple rapper for Mimikatz, bypass Defender

cornershot

Amplify network visibility from multiple POV of other hosts

corporate_masks

8-14 character Hashcat masks based on analysis of 1.5 million NTLM hashes cracked while pentesting

cplresourcerunner

Run shellcode from resource

cr3dov3r

Know the dangers of credential reuse attacks.

crackhash

Crackhash is a tool that try to crack different types of hashes using free online services.

crackmapexec

A swiss army knife for pentesting networks

crackmapexec-custom-modules

crackmapexec-machineaccountquota

CrackMapExec module that retrieves the "MachineAccountQuota" domain-level attribute.

crackmapexecwin

The great CrackMapExec tool compiled for Windows

crackmapexecwin-1

CrackMapExec v5.1.0 compiled for Windows

crackmapextreme

For all your network pentesting needs

credmap

The Credential Mapper

credmaster

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

credninja

A multithreaded tool designed to identify if credentials are valid, invalid, or local admin valid credentials within a network at-scale via SMB, plus now with a user hunter

credphish

CredPhish is a PowerShell script designed to invoke legitimate credential prompts and exfiltrate passwords over DNS.

creds

Some usefull Scripts and Executables for Pentest & Forensics

credsleaker

Credsleaker allows an attacker to craft a highly convincing credentials prompt using Windows Security, validate it against the DC and in turn leak it via an HTTP request.

crimson_cracking

All around cracking wordlist.

crosslinked

LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping

crowbar

Crowbar is brute forcing tool that can be used during penetration tests. It is developed to support protocols that are not currently supported by thc-hydra and other popular brute forcing tools.

crypto-tools

A collection of tools that deal with crypto and cryptanalysis. For educational purposes only. These tools are likely not a good substitute for real cryptography.

crypton

Library consisting of explanation and implementation of all the existing attacks on various Encryption Systems, Digital Signatures, Hashing Algorithms along with example challenges from CTFs