Agent Claude Code
Plans Active Directory attack paths from enumeration or BloodHound data. Use on domain-joined Windows rooms.
2 18d ago A 21 tokens
original MIT
Agent Claude Code
Maps discovered service versions to known CVEs and public exploits. Use after version detection.
2 18d ago A 17 tokens
original MIT
Agent Claude Code
Suggests privilege escalation paths from enumeration output. Use once you have a foothold.
2 18d ago A 17 tokens
original MIT
recon-parser
04Agent Claude Code
Parses raw scan output into structured findings. Use after any nmap/ffuf/nikto run.
2 18d ago A 22 tokens
original MIT
Agent Claude Code
Turns notes.md and scans into a clean writeup. Use when a room is solved.
2 18d ago A 18 tokens
original MIT
Agent Claude Code
Ranks Windows privilege escalation paths from enum output. Use after winPEAS/whoami/systeminfo on a Windows box.
2 18d ago A 24 tokens
original MIT
crack
07Command Claude Code
Identify and crack a hash or password-protected file.
2 18d ago A 10 tokens
original MIT
db-enum
08Command Claude Code
Enumerate/exploit a database — connect and read first, heavy brute only when justified.
2 18d ago A 17 tokens
original MIT
enum-ad
09Command Claude Code
Enumerate a Windows / Active Directory target (SMB, LDAP, RPC, users).
2 18d ago A 18 tokens
original MIT
enum-smb
10Command Claude Code
Enumerate SMB/NetBIOS — cheap listing first, heavy brute/enumeration only when it'll pay off.
2 18d ago A 22 tokens
original MIT
enum-udp
11Command Claude Code
UDP scan + service follow-up — top ports first, full sweep only when justified.
2 18d ago A 16 tokens
original MIT
enum-web
12Command Claude Code
Enumerate a web service — cheap recon first, heavy scans only when they'll pay off.
2 18d ago A 17 tokens
original MIT
kerberos
13Command Claude Code
Kerberos attacks — AS-REP roasting and Kerberoasting.
2 18d ago B 12 tokens
original MIT
Command Claude Code
Linux local privilege escalation — enumeration checklist and analysis.
2 18d ago F 9 tokens
original MIT
listener
15Command Claude Code
Set up a reverse shell listener and generate matching payloads.
2 18d ago A 11 tokens
original MIT
notes
16Command Claude Code
Maintain the ROOM BRAIN — the structured state file the coach reasons from.
2 18d ago A 14 tokens
original MIT
pcap
17Command Claude Code
Network forensics with tshark — creds, files, attacks, exfil; overview first, digs gated.
2 18d ago B 21 tokens
original MIT
recon
18Command Claude Code
Run staged nmap recon against the target and parse results.
2 18d ago A 11 tokens
original MIT
start
19Command Claude Code
Room coach — does setup, then teaches you through the room step by step, adapting to how stuck you are.
2 18d ago A 22 tokens
original MIT
steg
20Command Claude Code
Offline file / image analysis — steganography, metadata, embedded data.
2 18d ago A 14 tokens
original MIT
tunnel
21Command Claude Code
Pivot / tunnel into an internal network through a compromised host.
2 18d ago B 11 tokens
original MIT
vpn-check
22Command Claude Code
Verify THM VPN is up and the target is reachable.
2 18d ago B 11 tokens
original MIT
web-recon
23Command Claude Code
Subdomain / virtual-host / certificate recon (the DNS-side of web enum).
2 18d ago A 16 tokens
original MIT
win-privesc
24Command Claude Code
Windows local privilege escalation — enumeration checklist and analysis.
2 18d ago A 9 tokens
original MIT