#1Tools for weaponizing vulnerabilities to gain unauthorized access to systems or data.
Kitploit recommended
mgeeky/penetration-testing-toolsA collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security…
dana-at-cp/backdoor-apkbackdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have…
cobbr/covenantCovenant is a collaborative .NET C2 framework for red teamers.
0xmarcio/pocindexSearch public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context.
netspi/powerupsqlPowerUpSQL: A PowerShell Toolkit for Attacking SQL Server
byt3bl33d3r/offensivenimMy experiments in weaponizing Nim (https://nim-lang.org/)
marten4n6/evilosxAn evil RAT (Remote Administration Tool) for macOS / OS X.
gracenolan/notesCurated study notes and interview preparation guide for security engineering roles, covering networking, web security, cryptography, malware…
designativedave/androratRemote Administration Tool for Android devices
threedr3am/learnjavabugJava安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security…
thewover/donutGenerates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs…
tarunkant/gopherusThis tool generates gopher link for exploiting SSRF and gaining RCE in various servers
xoreaxeaxeax/skitter-creek-bath-saltsUnlocking _everything_ on the CPU with DRAM scrambling
monoxgas/srdiShellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode
byt3bl33d3r/silenttrinityAn asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR
maxchehab/css-keyloggingChrome extension and Express server that exploits keylogging abilities of CSS.
ch0pin/medusaMobile Edge-Dynamic Unified Security Analysis
r4j0x00/exploitsProof-of-concept exploit collection targeting Linux kernel LPE, sudo heap overflow, and Chrome V8 OOB write vulnerabilities for penetration testing.
