#1Tools for extracting sensitive data from compromised systems without detection.
Kitploit recommended
ioncodes/cve-2020-16938Bypassing NTFS permissions to read any files as unprivileged user.
infoskirmish/hiveThe CIA Hive source code as released by Wikileaks
b3rito/peekopeeko – Browser-based XSS C2 for stealthy internal network exploration via infected browser.
de3vil/stealingThe SteaLinG is an open-source penetration testing framework designed for social engineering
batuhaniskr/twitter-intelligenceTwitter Intelligence OSINT project performs tracking and analysis of the Twitter
vp777/procrustesA bash script that automates the exfiltration of data over dns in case we have blind command execution on a server with egress filtering
denandz/lpc_sniffer_tpmA low pin count sniffer for ICEStick - targeting TPM chips
s3n4t0r-0x0/pixelcode-attackMalicious PixelCode is a security research project that demonstrates a covert technique for encoding executable files into pixel data and storing…
rodricios/wxpathwxpath - declarative web crawling with XPath; a Web Query Language (WQL)
blackhillsinfosec/skyhookA round-trip obfuscated HTTP file transfer setup built to bypass IDS detections.
moniik/poc_salesforce_lightningAcademic purposes only. Attack against Salesforce lightning with guest privilege.
alessandroz/pupyPupy is an opensource, multi-platform (Windows, Linux, OSX, Android), multi function RAT (Remote Administration Tool) mainly written in python. It…
mrd0x/webview2-cookie-stealerInjects JavaScript keylogger into WebView2 pages to capture keystrokes and exfiltrate cookies from Microsoft authentication sessions via HTTP GET…
osandamalith/exe2imageA simple utility to convert EXE files to JPEG images and vice versa.
zux0x3a/dns-black-catMulti platform toolkit for an interactive DNS shell commands exfiltration, by using DNS-Cat you will be able to execute system commands in shell mode…
mdp/linkedin-extension-fingerprintingDocuments and identifies 2,953 Chrome extensions silently probed by LinkedIn, providing tools to fetch extension names and analyze browser…
bande-a-bonnot/boucle-frameworkAutonomous agent framework with structured memory, safety hooks, and loop management. Built by the agent that runs on it.
martinoj2009/icmpexfilExfiltrate data with ICMP
