#1Tools for exploring and expanding control within compromised networks by moving between systems.
Kitploit recommended
xi0onamdev/winrar-cve-2025-8088-exploitation-toolkitGUI tool for creating malicious RAR archives exploiting CVE-2025-8088 path traversal. Uses NTFS ADS stealth and RAR5 header injection for payload…
ccordeiro/cve-2021-1675C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527
edsonjt81/cve-2021-1675Impacket-based exploit for PrintNightmare (CVE-2021-1675/34527) enabling remote or local DLL execution against Windows print spooler services.
ptter23/cve-2021-1675CVE-2021-1675: ZERO-DAY VULNERABILITY IN WINDOWS PRINTER SERVICE WITH AN EXPLOIT AVAILABLE IN ALL OPERATING SYSTEM VERSIONS
ianxtianxt/ssocks-0.0.14SOCKS proxy for port forwarding and RDP tunneling, enabling lateral movement and remote access in penetration testing scenarios.
p1rat3r00t/why-so-serious-samPoC malware that uses exploit CVE-2021-36934 (improper ACLs on shadow copies) using a fileless red team method on Windows 10/11 with LOLBins,…
hxlxmj/cve-2025-26264CVE-2025-26264 - GeoVision GV-ASWeb with the version 6.1.2.0 or less, contains a Remote Code Execution (RCE) vulnerability within its Notification…
kristof-mattei/gardyn-hackCVE-2025-29628, CVE-2025-29629, CVE-2025-29630, CVE-2025-29631
lutrasecurity/cve-2025-1910-watchguard-privilege-escalationProof-of-Concept for exploiting CVE-2025-1910, a local privilege escalation within Watchguard's Mobile VPN with SSL client.
fengzhouc/cve-2021-21300Proof-of-concept exploit for CVE-2021-21300, demonstrating remote code execution via malicious git repository cloning with symlink and filter abuse…
ptrstr/cve-2025-47810PunkBuster LPI to NT AUTHORITY\SYSTEM
sarpantkeltiek/cve-2024-37010Exploit for the CVE-2024-37010: access other user's external storage & lateral movement
mbadanoiu/cve-2020-13941CVE-2020-13941: Abusing UNC Paths in Windows Environments in Apache Solr
corelight/petitpotam-notestZeek package for detecting PetitPotam NTLM relay attacks via EFS DCERPC over unencrypted SMB, distinguishing successful and unsuccessful exploit…
whippet0/cve-2020-1472CVE-2020-1472
z50913/cve-2020-27955Proof-of-concept exploit for CVE-2020-27955 in Git-LFS, demonstrating remote code execution via a crafted git clone operation to obtain a reverse…
galoget/printnightmare-cve-2021-1675-cve-2021-34527CVE-2021-1675 / CVE-2021-34527 - PrintNightmare Python, C# and PowerShell Exploits Implementations (LPE & RCE)
cwjchoi01/cve-2024-57394Proof-of-concept exploit for CVE-2024-57394: low-privilege file restoration to System32 enabling DLL hijacking and local privilege escalation to…
