#1Tools for extracting sensitive data from compromised systems without detection.
Kitploit recommended
kspearrin/ff-password-exporterEasily export your passwords from Firefox.
getagentseal/agentsealSecurity toolkit for AI agents. Scan your machine for dangerous skills and MCP configs, monitor for supply chain attacks, test prompt injection…
huntoai/rdroid[Android RAT] Remotely manage your android phone using PHP Interface
ziconius/fudgec2FudgeC2 - a command and control framework designed for team collaboration and post-exploitation activities.
vectra-ai-research/maad-afMAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).
maldev-academy/embedpayloadinpngEmbed a payload inside a PNG file
nccgroup/solitudeSolitude is a privacy analysis tool that enables anyone to conduct their own privacy investigations. Whether a curious novice or a more advanced…
api0cradle/cve-2023-23397-poc-powershellPowerShell script to exploit CVE-2023-23397 by sending or saving malicious Outlook calendar invitations that trigger NTLM credential leakage via the…
icyguider/icmp-transfertoolsTransfer files to and from a Windows host via ICMP in restricted network environments.
tcstool/fireawayNext Generation Firewall Audit and Bypass Tool
eng1ndes/northstarc2Web Based Command Control Framework (C2) #C2 #PostExploitation #CommandControl #RedTeam #C2Framework #PHPC2 #.NETMalware #Malware #PHPMalware #CnC…
imcpwn/browser-backdoorBrowserBackdoor is an Electron Application with a JavaScript WebSocket Backdoor and a Ruby Command-Line Listener
skiller9090/luciferA Powerful Penetration Tool For Automating Penetration Tasks Such As Local Privilege Escalation, Enumeration, Exfiltration and More... Use Or Build…
dagowda/notrdpHavoc C2 plugin that creates a hidden Windows desktop, streams it to a browser viewer, and injects mouse/keyboard input for covert remote control.
acceis/leakscraperLeakScraper is an efficient set of tools to process and visualize huge text files containing credentials. Theses tools are designed to help…
ctxis/snitchdnsDatabase Driven DNS Server with a Web UI
eksperience/knockoutlookC# tool for red team operations that extracts contacts, mailbox metadata, and searches emails via Outlook COM object, with built-in Programmatic…
puliczek/cve-2022-0337-poc-google-chrome-microsoft-edge-opera🎩 🤟🏻 [P1-$10,000] Google Chrome, Microsoft Edge and Opera - vulnerability reported by Maciej Pulikowski - System environment variables leak -…
