// offensive security

lupingQAQ

Red team operations researcher — AD attacks, C2 development, AV/EDR evasion, cloud-native and AI-powered offense.

Reference · EN / ZH

Red Team Skill Tree

24-chapter full-stack offensive-security reference — recon, AD, C2, evasion, cloud & AI. Updated for 2025-2026.

Docs GitHub
Manual · EN / ZH / PDF

Impacket Programming Manual

Write your own AD PoC with impacket — Kerberos, DCE/RPC, DCOM and WMI at source level.

Docs GitHub
Agent · Python / Java

JGD — JavaGadgetDigger

Autonomous Java deserialization gadget-chain mining: JARs in → chains + PoCs out.

GitHub
Tool · Python / MCP

NtObjectManager-MCP

Stateful Windows RPC attack-surface research for AI agents, built on NtObjectManager.

GitHub v0.2.0
Research · C# / .NET

dotnet-memshell

Three .NET memory shells at distinct insertion points — no new port, no file drop, no web.config change.

GitHub
Tool · Python

SqlStealthRogue

Zero-probe SQL/NoSQL injection data dumper — 12 engines, tamper-plugin WAF bypass.

GitHub