| Anubis | SSTI (Server-Side Template Injection) · Cross-Site Scripting (XSS) · Information Leakage · OS Command Injection · Cracking Hashes (hashcat / John) · Port Forwarding / Pivoting · SMB (139/445) · Remote Code Execution (RCE) | 3 |
| APT | Cracking Hashes (hashcat / John) · winPEAS · SMB (139/445) | 4 |
| Bankrobber | Brute Force / Rate-Limit Bypass · SQL Injection · SMB (139/445) · Remote Code Execution (RCE) · Cross-Site Scripting (XSS) | 3 |
| Fighter | SQL Injection · Cron abuse · Remote Code Execution (RCE) | 3 |
| Hackback | Subdomain Enumeration · Information Leakage · Directory fuzzing · Remote Code Execution (RCE) | 3 |
| Minion | Server-Side Request Forgery | 3 |
| MultiMaster | Information Leakage · Active Directory · SQL Injection · Brute Force / Rate-Limit Bypass · BloodHound · WebSockets Vulnerabilities · Port Forwarding / Pivoting · AS-REP Roasting · SMB (139/445) · Remote Code Execution (RCE) | 3 |
| Sizzle | Active Directory · Kerberoasting · BloodHound · DCSync · Port Forwarding / Pivoting · SMB (139/445) | 4 |
