#1Tools for extracting sensitive data from compromised systems without detection.
Kitploit recommended
octoberfest7/memfilesA CobaltStrike toolkit to write files produced by Beacon to memory instead of disk
incidedigital/misticaAn open source swiss army knife for arbitrary communication over application protocols
nccgroup/crosssitecontenthijackingContent hijacking proof-of-concept using Flash, PDF and Silverlight
tvdstaaij/telegram-history-dumpBackup Telegram chat logs with incremental support, multiple output formats (JSON, HTML, plaintext), and media download via telegram-cli remote…
yunuscadirci/callstrangerVulnerability checker for Callstranger (CVE-2020-12695)
mazen160/shenninaAutomating Host Exploitation with AI
redhuntlabs/octopiiAn AI-powered Personal Identifiable Information (PII) scanner.
mthbernardes/gtrsGTRS - Google Translator Reverse Shell
sq5bpf/etherifyEtherify - bringing the ether back to ethernet
earthquake/xfltreatXFLTReaT tunnelling framework
fbkcs/thunderdnsThis tool can forward TCP traffic over DNS protocol. Non-compile clients + socks5 support.
priyansh-anand/steganographerHide files inside images: encrypted, signed, deniable, and JPEG-robust. Python CLI and library with built-in steganalysis and an in-browser demo.
mrd0x/evilseleniumWeaponizes Selenium to automate credential theft, cookie dumping, email exfiltration, and file extraction from Chromium browsers for red team…
jas502n/grafana-cve-2021-43798Grafana Unauthorized arbitrary file reading vulnerability
globalpolicy/phonemonitorA Remote Administration Tool for Android devices
joelgmsec/leaksearchSearches and parses plaintext passwords from public breach databases (ProxyNova COMB) by keyword (user/domain/password), with proxy support and…
pushpenderindia/sinisterSinister is Windows/Linux Keylogger Generator which sends key-logs via email with other juicy target info
wack0/cve-2022-21894baton drop (CVE-2022-21894): Secure Boot Security Feature Bypass Vulnerability
