An interactive offensive-security reference suite

🏠 HomeAdaptixAI AttacksBloodHoundCertipyCloudEvilginxHashcatImpacketKaliLotLMetasploitNetExecOSINTRTFM CommandsScenariosTools DatabaseTTP / ATT&CK

This site was created as a quick reference guide for Red Teamers, Purple Teamers, and security professionals who need fast access to commonly used tools, commands, and techniques during an engagement. The goal is to provide a centralized resource that helps operators quickly find useful syntax, references, and examples without having to search across multiple notes, repositories, or documentation sources.

The content is intended to support common Red Team and Purple Team activities, including reconnaissance, enumeration, privilege escalation, lateral movement, credential access, persistence testing, detection validation, and cleanup. It is designed to be practical, easy to navigate, and useful in real-world engagement scenarios where time and accuracy matter.

👾
AdaptixC2
Listeners, beacon generation, BOFs, tunneling & pivoting for the AdaptixC2 framework.
32 entries
🤖
AI / LLM Attacks
Prompt injection, jailbreaks, RAG & agent abuse, model/data extraction — OWASP LLM Top 10 & MITRE ATLAS.
47 techniques
🐾
BloodHound Queries
Cypher query library — AD, Azure & AD CS, plus Jamf, GitHub & Okta.
602 queries
🔑
Certipy
AD CS enumeration & abuse — ESC1-ESC16, certificate requests, PKINIT auth, shadow credentials & golden certs.
27 entries
☁️
Cloud Attacks
AWS, Azure / Entra ID & GCP — recon, cred access, IAM privesc, lateral movement, persistence & exfil.
45 techniques
🦊
Evilginx
MITM reverse-proxy phishing — phishlets, lures, credential & session-cookie capture for MFA-bypass testing.
18 entries
🔑
Hashcat Cheat Sheet
Hash modes, attack modes, masks, rules, methodology & command examples.
129 entries
🤖
Impacket Modules
Every Impacket example script — remote exec, secretsdump, Kerberos, NTLM relay & more.
60 modules
🐔
Kali Linux
Setup, tool metapackages, services, recon/web/wireless/cracking tool categories & customization.
21 entries
🌴
Living off the Land
Operate with built-in OS binaries & trusted tools — recon, execution, cred access, lateral, persistence, exfil.
27 steps
💥
Metasploit Framework
msfconsole, msfvenom, Meterpreter, modules, pivoting & post-exploitation.
41 entries
🧰
NetExec (nxc)
Multi-protocol AD assessment — enumeration, password spraying, credential dumping, execution & modules.
30 entries
🔎
OSINT Steps
Passive reconnaissance methodology — domains, infra, people, breaches, code & geo, step by step.
24 steps
📖
RTFM Commands
Red Team Field Manual v2 reference — Windows, *NIX, networking, tools & more.
1293 commands
🧮
Scenario Builder
Interactive: assemble a red/purple-team engagement scenario — objective, adversary, ROE & an ordered ATT&CK plan. Save, print & export.
interactive
🛠️
Tools Database
Offensive security tooling — recon to exfiltration & AI red teaming, mapped to MITRE ATT&CK.
339 tools
🧩
TTP / ATT&CK Matrix
Full MITRE ATT&CK Enterprise matrix — procedures, kill-chain view & a custom chain builder.
702 techniques

⚙ Appearance

Theme Presets

Custom Colors

Background
Card
Accent
Border
Text

Typography

Size
14px
Font

Layout

Density
Card Radius
10px
Card Border
Grid Gap
1rem
Min Card Width
340px
Hover Shadow
0.4
Animations
Show Header