diff --git a/Offensive.md b/Offensive.md
index bd2c961..9ec95d6 100644
--- a/Offensive.md
+++ b/Offensive.md
@@ -2195,6 +2195,10 @@ Some tools can be categorized in more than one category. But because the current
KoreLogicSecurity/wmkick |
WMkick is a TCP protocol redirector/MITM tool that targets NTLM authentication message flows in WMI (135/tcp) and Powershell-Remoting/WSMan/WinRM (5985/tcp) to capture NetNTLMv2 hashes. |
+
+ leechristensen/SpoolSample |
+ PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well. |
+
Luct0r/KerberOPSEC |
OPSEC safe Kerberoasting in C# |
@@ -2308,6 +2312,10 @@ Some tools can be categorized in more than one category. But because the current
shantanu561993/SharpLoginPrompt |
This Program creates a login prompt to gather username and password of the current user. This project allows red team to phish username and password of the current user without touching lsass and having adminitrator credentials on the system. |
+
+ ShutdownRepo/ShadowCoerce |
+ |
+
ShutdownRepo/smartbrute |
Password spraying and bruteforcing tool for Active Directory Domain Services |