#1Tools for extracting sensitive data from compromised systems without detection.
Kitploit recommended
viralmaniar/phirauteeA proof of concept crypto virus to spread user awareness about attacks and implications of ransomwares. Phirautee is written purely using PowerShell…
saadahla/docplzDocuments Exfiltration project for fun and educational purposes
p0dalirius/dumpsmbshareA python script to dump files and folders remotely from a Windows SMB share.
darkspacesecurity/ssh-stealerSmart keylogging capability to steal SSH Credentials including password & Private Key
hac01/azure-pentesting-suiteGo toolkit for authorized Azure security assessments: enumerates subscriptions and resources, audits misconfigurations, and attacks public Blob…
papermtn/gitlab-watchmanFinding exposed secrets and personal data in GitLab
trustedsec/sliverkeyloggerWindows keylogging module for the Sliver C2 implant framework, using Raw Input to capture keystrokes and expose start, stop, and retrieval commands…
xret2pwn/teamsniperTeamsniper is a tool for fetching keywords in a Microsoft Teams such as (passwords, emails, database, etc.).
moloch--/leakdbWeb-Scale NoSQL Idempotent Cloud-Native Big-Data Serverless Plaintext Credential Search
mnemonic-no/grafeoOpen platform for modelling, collection and exchange of knowledge
ricardojoserf/sharpcoverttubeYoutube as C2 channel - Control Windows systems uploading QR videos to Youtube
jconwell/secret_handshakeA prototype malware C2 channel using x509 certificates over mTLS
syss-research/smbcrawlersmbcrawler is no-nonsense tool that takes credentials and a list of hosts and 'crawls' (or 'spiders') through those shares
rwhitcroft/dnschanA remote access trojan over DNS
zh54321/sharepointdumperPowerShell SharePoint extraction + auditing tool for red/blue/purple teams. Enumerates all SharePoint sites/drives a user can access via Microsoft…
badsectorlabs/sccm-http-looterFind interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares via HTTP(s)
infostealers-stats/data-breachA continuously updated resource that catalogs confirmed data breaches from across the globe. Each entry includes the breach name, usually aligned…
