#1Tools for weaponizing vulnerabilities to gain unauthorized access to systems or data.
Kitploit recommended
wavestone-cdt/edrsandblastWeaponizes vulnerable signed drivers to bypass EDR kernel callbacks, object callbacks, ETW TI provider, and userland hooks for LSASS memory dumping…
johnhammond/msdt-follinaGenerates a malicious Microsoft Word document exploiting the MS-MSDT 'Follina' vulnerability to execute arbitrary commands or stage payloads via an…
windowsexploits/exploitsCurated archive of compiled and tested Windows exploits, providing ready-to-use binaries and scripts for security testing and research.
klezvirus/inceptorTemplate-Driven AV/EDR Evasion Framework
samyk/slipstreamNAT Slipstreaming allows an attacker to remotely access any TCP/UDP services bound to a victim machine, bypassing the victim’s NAT/firewall, just by…
terjanq/tiny-xss-payloadsA collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me
inguardians/peiratesPeirates - Kubernetes Penetration Testing tool
lionsec/xerosploitEfficient and advanced man in the middle framework
syss-research/sethPerform a MitM attack and extract clear text credentials from RDP connections
ascotbe/kernelhub:palm_tree:Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability…
fortra/nanodumpThe swiss army knife of LSASS dumping
cn33liz/p0wnedshellPowerShell Runspace Post Exploitation Toolkit
govolution/avetAntiVirus Evasion Tool
arch3rpro/pentest-windows⚔️Windows11 Penetration Suite Toolkit 🔰 The First Windows Penetration Testing Environment on Mac M Chips
bashfuscator/bashfuscatorA fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.
mscholtes/ps2exeModule to compile powershell scripts to executables
bytecode77/r77-rootkitFileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.
