#1Tools for extracting sensitive data from compromised systems without detection.
Kitploit recommended

Security scanner for AI/ML model files. Detects malicious code, backdoors, and vulnerabilities before deployment
[unmaintained] Post-exploitation tool

Extracts LSA secrets and DPAPI keys from Windows registry hives via existing or newly created VSS shadow copies, with an inline regf parser and…

VeilTransfer is a data exfiltration utility designed to test and enhance the detection capabilities. This tool simulates real-world data exfiltration…

A collection of data exfiltration scripts for Red Team assessments.

Tool to automatic leak information using Hacking with engine searches

Recursively searches files for sensitive information using customizable regex patterns, designed for penetration testers to rapidly discover secrets…

Cromos is a tool for downloading legitimate extensions of the Chrome Web Store and inject codes in the background of the application.

PowerSploit - A PowerShell Post-Exploitation Framework

Windows Remote Post Breach Tool via Telegram

Set of python scripts which perform different ways of command execution via WMI protocol.

Parses Snaffler output file and generate beautified outputs.

Database components for RCS backend

The Outlook HTML Leak Test Project

Dumping App Bound Protected Credentials & Cookies Without Privileges.

Golang binary for data exfiltration with ICMP protocol (+ ICMP bindshell, http over ICMP tunneling, ...)

opensource repo for validating agentic AI applications: redteam, behavior, supply-chain, static analysis

This tool extracts and displays data from the Recall feature in Windows 11, providing an easy way to access information about your PC's activity…