Add: mdsecactivebreach/DragonCastle to Lateral Movement section

Offensive.md

@@ -2545,6 +2545,10 @@ Some tools can be categorized in more than one category. But because the current
         <td><a href="https://github.com/knavesec/Max">knavesec/Max</a></td>
         <td>Maximizing BloodHound. Max is a good boy.</td>
     </tr>
+    <tr>
+        <td><a href="https://github.com/mdsecactivebreach/DragonCastle">mdsecactivebreach/DragonCastle</a></td>
+        <td>A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process.</td>
+    </tr>
     <tr>
         <td><a href="https://github.com/mez-0/CSharpWinRM">mez-0/CSharpWinRM</a></td>
         <td>.NET 4.0 WinRM API Command Execution</td>

README.md

@@ -1153,6 +1153,10 @@ This repository is created as an online bookmark for useful links, resources and
         <td><a href="https://github.com/lyft/metadataproxy">lyft/metadataproxy</a></td>
         <td>A proxy for AWS's metadata service that gives out scoped IAM credentials from STS</td>
     </tr>
+    <tr>
+        <td><a href="https://github.com/Macmod/STARS">Macmod/STARS</a></td>
+        <td>A multi-cloud DNS record scanner that aims to help cybersecurity/IT analysts identify dangling CNAME records in their cloud DNS services that could possibly lead to subdomain takeover scenarios.</td>
+    </tr>
     <tr>
         <td><a href="https://github.com/mgeeky/AzureRT">mgeeky/AzureRT</a></td>
         <td>AzureRT - A Powershell module implementing various Azure Red Team tactics</td>