XiaoliChan
$ latest
$ whoami
I build Windows & Active Directory attack tooling, C2 infrastructure, and exploit PoCs — mostly in Python and Go, some PowerShell.
$ certs
OSCP+ · OffSec 2025
Alibaba Cloud Security · ACA 2026
$ ls ~/work # selected
| wmiexec-Pro | 1.3k | new generation of wmiexec.py |
| wmiexec-RegOut | 274 | wmiexec output via registry, no SMB needed |
| RedCaddy | 208 | C2 redirector based on Caddy |
| zerologon-Shot | 145 | Zerologon with automatic DC password restore |
| available-ipv6-hosts | 117 | IPv6 hosts |
| LDAPShell | 62 | ldap_shell.py wrapper for ntlmrelayx |
| hatstack | new | searchable index of every Black Hat briefing |
$ contact