#1Tools for exploring and expanding control within compromised networks by moving between systems.
Kitploit recommended
jacobtaylor3/c2-and-post-exploitation-frameworkCVE-2021-21220 Exploitation infrastructure
karimelsheikh1/htb-twomillion-writeupHackTheBox TwoMillion machine writeup — API abuse, command injection & CVE-2023-0386
mboatella25/metasploitable-pentest-labPentest completo sobre Metasploitable: recon con nmap, explotación con Metasploit (CVE-2007-2447), extracción y cracking de credenciales,…
kaleth4/cve-2026-20180In-depth technical analysis of Cisco ISE RCE vulnerabilities, including exploitation techniques, evasion methods, and remediation strategies for…
mein-0/cve-2026-0828Proof-of-concept exploit for CVE-2026-0828, a BYOVD vulnerability in Safetica ProcessMonitorDriver.sys allowing unprivileged termination of…
edu0x01/hack-toolsProject that brings together several pentest tools
synap5e/connectwise-automate-aitm-rceWriteup and code for CVE-2025-11492, CVE-2025-11493 - RCE in ConnctWise Automate RMM via Adversary-in-the-Middle
j4ck3lsyn-gen2/cve-2026-13768Azure IoT Hub where exposure of an owner-level Shared Access Key enables unauthenticated remote code execution (RCE) against connected IoT devices.…
abc1230940/soc336-windows-ole-zero-click-rce-exploitation-detected-cve-2025-21298SOC336 - Windows OLE Zero-Click RCE Exploitation Detected (CVE-2025-21298) Walkthrough
karimelsheikh1/htb-pterodactyl-writeupHTB Season 10 - Pterodactyl machine writeup. Medium Linux box covering CVE-2025-49132 (Pterodactyl Panel RCE) and CVE-2025-6018/6019 (udisks2…
youneskc/smb-penetration-testing-ntlm-relay-version-2-SMB Red Team Lab— NTLM Relay via LLMNR Poisoning, CVE-2007-2447, NTLMv2 Hash Cracking & NT AUTHORITY\SYSTEM on Windows 10
bhatbhupendra/moniker-link--cve-2024-21413-Educational guide on CVE-2024-21413, the Outlook zero-click Moniker Link vulnerability, covering attack flow, NTLM credential capture, detection with…
al1ex/hook-passwordchangenotifyHook PasswordChangeNotify
obscura-cert/cve-2025-33073Proof-of-concept tool that chains DNS injection, NTLM relay, and RPC-based coercion to test authentication relay paths in Windows Active Directory…
razureink/cve-2025-53779-kerberos_bypass_reproductionReproduction of cve-2025-53779-kerberos_bypass_reproduction
czabatta/thm-tempestTryHackMe SOC Level 1 — Follina CVE-2022-30190, Nim C2, Chisel, PrintSpoofer, backdoor accounts
4n4s4zi/cve-2025-33053_pocPOC exploit for CVE-2025-33053 (external control of file execution path in URL file)
int0/cve-2015-1769Proof-of-concept exploit for CVE-2015-1769 using a crafted VHD file and symbolic link to trigger a Windows privilege escalation via Mount Manager.
