crack
01Command Claude Code
Identify and crack a hash or password-protected file.
not rated 2 21d ago A 10 tokens
original MIT
2Stars on the repository
31Mods indexed here, across every type
21d agoLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown
db-enum
02Command Claude Code
Enumerate/exploit a database — connect and read first, heavy brute only when justified.
not rated 2 21d ago A 17 tokens
original MIT
enum-ad
03Command Claude Code
Enumerate a Windows / Active Directory target (SMB, LDAP, RPC, users).
not rated 2 21d ago A 18 tokens
original MIT
enum-smb
04Command Claude Code
Enumerate SMB/NetBIOS — cheap listing first, heavy brute/enumeration only when it'll pay off.
not rated 2 21d ago A 22 tokens
original MIT
enum-udp
05Command Claude Code
UDP scan + service follow-up — top ports first, full sweep only when justified.
not rated 2 21d ago A 16 tokens
original MIT
enum-web
06Command Claude Code
Enumerate a web service — cheap recon first, heavy scans only when they'll pay off.
not rated 2 21d ago A 17 tokens
original MIT
kerberos
07Command Claude Code
Kerberos attacks — AS-REP roasting and Kerberoasting.
not rated 2 21d ago B 12 tokens
original MIT
Command Claude Code
Linux local privilege escalation — enumeration checklist and analysis.
not rated 2 21d ago F 9 tokens
original MIT
listener
09Command Claude Code
Set up a reverse shell listener and generate matching payloads.
not rated 2 21d ago A 11 tokens
original MIT
notes
10Command Claude Code
Maintain the ROOM BRAIN — the structured state file the coach reasons from.
not rated 2 21d ago A 14 tokens
original MIT
pcap
11Command Claude Code
Network forensics with tshark — creds, files, attacks, exfil; overview first, digs gated.
not rated 2 21d ago B 21 tokens
original MIT
recon
12Command Claude Code
Run staged nmap recon against the target and parse results.
not rated 2 21d ago A 11 tokens
original MIT
start
13Command Claude Code
Room coach — does setup, then teaches you through the room step by step, adapting to how stuck you are.
not rated 2 21d ago A 22 tokens
original MIT
steg
14Command Claude Code
Offline file / image analysis — steganography, metadata, embedded data.
not rated 2 21d ago A 14 tokens
original MIT
tunnel
15Command Claude Code
Pivot / tunnel into an internal network through a compromised host.
not rated 2 21d ago B 11 tokens
original MIT
vpn-check
16Command Claude Code
Verify THM VPN is up and the target is reachable.
not rated 2 21d ago B 11 tokens
original MIT
web-recon
17Command Claude Code
Subdomain / virtual-host / certificate recon (the DNS-side of web enum).
not rated 2 21d ago A 16 tokens
original MIT
win-privesc
18Command Claude Code
Windows local privilege escalation — enumeration checklist and analysis.
not rated 2 21d ago A 9 tokens
original MIT
win-shell
19Command Claude Code
Get an interactive session on a Windows host (once you have creds).
not rated 2 21d ago A 14 tokens
original MIT
wp
20Command Claude Code
WordPress enumeration & exploitation with wpscan — cheap enum first, heavy/creds gated.
not rated 2 21d ago A 19 tokens
original MIT
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: