Skip to content

@synacktiv Synacktiv

Change the repository type filter

All

    Repositories list

    103 repositories

    • SCCMSecrets

      Public
      SCCMSecrets.py aims at exploiting SCCM policies distribution for credentials harvesting, initial access and lateral movement.
      Python
      •26•241•0•0•Updated Sep 8, 2025Sep 8, 2025

    • shh

      Public
      Systemd Hardening Helper - Mirror of https://github.com/desbma/shh
      Rust
      •
      GNU General Public License v3.0
      •2•136•1•0•Updated Sep 8, 2025Sep 8, 2025

    • statx

      Public
      This program uses the statx system call to return file status (extended) in the body file format.
      C
      •
      Apache License 2.0
      •2•0•0•0•Updated Sep 5, 2025Sep 5, 2025

    • gpoParser

      Public
      gpoParser is a tool designed to extract and analyze configurations applied through Group Policy Objects (GPOs) in an Active Directory environment.
      active-directoryred-teamgpopentest-tool
      Python
      •26•272•0•0•Updated Sep 1, 2025Sep 1, 2025

    • GroupPolicyBackdoor

      Public
      Group Policy Objects manipulation and exploitation framework
      Python
      •25•232•1•0•Updated Aug 20, 2025Aug 20, 2025

    • HopLa

      Public
      HopLa Burp Suite Extender plugin - Brings AI capabilities, autocompletion support, and a set of useful payloads to Burp Suite
      burpburp-pluginburpsuiteburp-extensionsburp-uiburp-suite
      Java
      •
      BSD 3-Clause "New" or "Revised" License
      •81•775•4•0•Updated Aug 13, 2025Aug 13, 2025

    • CVE-2025-47178

      Public
      Python
      •0•4•0•0•Updated Aug 5, 2025Aug 5, 2025

    • sccmsqlclient

      Public
      Python
      •3•24•1•0•Updated Aug 5, 2025Aug 5, 2025

    • DepFuzzer

      Public
      Python
      •
      MIT License
      •8•84•0•1•Updated Jul 31, 2025Jul 31, 2025

    • nord-stream

      Public
      Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently supports Azure DevOps, GitHub and GitLab.
      githubgitlabgitlab-cici-cdcicdazuredevops
      Python
      •
      GNU General Public License v3.0
      •15•298•0•0•Updated Jul 30, 2025Jul 30, 2025

    • AADOutsider-py

      Public
      Python3 rewrite of AsOutsider features of AADInternals
      Python
      •
      MIT License
      •5•54•0•0•Updated Jul 23, 2025Jul 23, 2025

    • mofos

      Public
      Virtual machines manipulation framework
      Python
      •
      MIT License
      •6•94•0•0•Updated Jul 23, 2025Jul 23, 2025

    • captaincredz

      Public
      CaptainCredz is a modular and discreet password-spraying tool.
      Python
      •10•131•0•0•Updated Jul 22, 2025Jul 22, 2025

    • adb_client

      Public
      Rust ADB client - Mirror of https://github.com/cocool97/adb_client
      Rust
      •
      MIT License
      •5•22•1•1•Updated Jul 7, 2025Jul 7, 2025

    • kcmapper

      Public
      KcMapper is a security auditing tool for Keycloak. It exports your Keycloak configuration (realms, clients, users, roles, etc.) into a Neo4j graph database. This representation enables complex relationship analysis and security auditing through a built-in interactive web UI with pre-defined queries.
      Python
      •
      MIT License
      •0•11•0•0•Updated Jul 2, 2025Jul 2, 2025

    • bbs

      Public
      bbs is a router for SOCKS and HTTP proxies. It exposes a SOCKS5 (or HTTP CONNECT) service and forwards incoming requests to proxies or chains of proxies based on the request's target. Routing can be configured with a PAC script (if built with PAC support), or through a JSON file.
      Go
      •5•90•0•0•Updated Jun 27, 2025Jun 27, 2025

    • laravel-crypto-killer

      Public
      A tool designed to exploit bad implementations of decryption mechanisms in Laravel applications.
      Python
      •
      MIT License
      •9•99•0•0•Updated Jun 25, 2025Jun 25, 2025

    • ntdissector

      Public
      Python
      •
      Other
      •17•158•4•6•Updated Jun 20, 2025Jun 20, 2025

    • frinet

      Public
      Frida-based tracer for easier reverse-engineering on Android, iOS, Linux, Windows and most related architectures.
      C
      •
      MIT License
      •49•566•5•1•Updated Jun 19, 2025Jun 19, 2025

    • thats_no_pipe

      Public
      Windows named pipe hooking toolkit
      TypeScript
      •0•2•0•0•Updated Jun 18, 2025Jun 18, 2025

    • objc-helper

      Public
      IDA helper plugin to reverse engineer Objective-C code
      Python
      •7•41•0•0•Updated Jun 12, 2025Jun 12, 2025

    • CcmMessagingBackdoor

      Public
      C#
      •2•18•0•0•Updated Jun 10, 2025Jun 10, 2025

    • ROADtools

      Public
      A collection of Azure AD/Entra tools for offensive and defensive security purposes
      Python
      •
      MIT License
      •323•1•0•0•Updated Jun 9, 2025Jun 9, 2025

    • synodecrypt

      Public
      A tool to decrypt all Synology encrypted archives (SPK, PAT, ...)
      Python
      •0•10•0•0•Updated Jun 6, 2025Jun 6, 2025

    • windows_kernel_shadow_stack

      Public
      Proof of concepts demonstrating some aspects of the Windows kernel shadow stack mitigation.
      C
      •8•51•0•0•Updated Jun 2, 2025Jun 2, 2025

    • CVE-2025-47227_CVE-2025-47228

      Public
      ScriptCase Pre-Authenticated Remote Command Execution exploitation script (CVE-2025-47227, CVE-2025-47228).
      exploitscriptcasecve-2025-47227cve-2025-47228
      Python
      •1•7•0•0•Updated May 14, 2025May 14, 2025

    • synacktiv-rules

      Public
      Public repository of Sigma and YARA rules created by Synacktiv
      YARA
      •
      Other
      •1•12•0•0•Updated May 12, 2025May 12, 2025

    • octoscan

      Public
      Octoscan is a static vulnerability scanner for GitHub action workflows.
      githubexploitvulnerabilitycicdgithub-actions
      Go
      •
      GNU General Public License v3.0
      •18•221•8•5•Updated Apr 11, 2025Apr 11, 2025

    • OUned

      Public
      The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning
      Python
      •14•142•0•0•Updated Mar 29, 2025Mar 29, 2025

    • IPSpinner

      Public
      IPSpinner works as a local proxy that redirects requests through external services.
      Go
      •5•77•0•0•Updated Mar 19, 2025Mar 19, 2025