#1Tools for extracting sensitive data from compromised systems without detection.
Kitploit recommended
ettic-team/dnsbinDNS-based data exfiltration testing tool with bidirectional transfer, web UI, and client script for detecting blind RCE/XXE vulnerabilities in…
owasp/igoatOWASP iGoat - A Learning Tool for iOS App Pentesting and Security by Swaroop Yermalkar
ccob/volumiserCLI and interactive console for listing, browsing, and extracting files from VM disk images (VHDX, VMDK, EBS snapshots, raw disks) for red-team…
thewhiteh4t/flashsploitExploitation Framework for ATtiny85 Based HID Attacks
spiderlabs/scavengerscavenger : is a multi-threaded post-exploitation scanning tool for scavenging systems, finding most frequently used files and folders as well as…
ricardojoserf/samdumpExtract the SAM and SYSTEM hives using the Volume Shadow Copy (VSS) API. With exfiltration and XOR obfuscation options. In C#, C++, Crystal, Python,…
synacktiv/nord-streamNord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently supports…
tastypepperoni/pplbladeBypasses PPL protection to dump LSASS process memory, obfuscates dump files with XOR, and exfiltrates them remotely via RAW or SMB without writing to…
matheuzsecurity/ringreaperLinux post-exploitation agent that uses io_uring to stealthily bypass EDR detection by avoiding traditional syscalls.
veggiedefender/browsertunnelSurreptitiously exfiltrate data from the browser over DNS
0xbinder/cve-2024-0044CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13
hoodoer/js-tapJavaScript beacons and C2 to be used for XSS payload or post exploitation implants on webapp servers or desktop software to monitor users and…
rxwx/chloniumClone and import Chromium cookies and passwords across browsers with offline DPAPI state key decryption, supporting AES-256 GCM encrypted databases…
darksight-analytics/tgspyderCLI tool for structured Telegram OSINT data collection. Scrapes members, messages, invite links, and user metadata from public/private groups,…
aleksamcode/wifi-password-stealerSimple Windows and Linux keystroke injection tool that exfiltrates stored WiFi data (SSID and password).
chiefautism/privacy-parserreverse of openai privacy filter. same 1.5b model, returns pii as structured spans instead of masking
justicerage/ffmFreedom Fighting Mode: open source hacking harness
jamescooteuk/sharpsphere.NET Project for Attacking vCenter
