#1Tools for exploring and expanding control within compromised networks by moving between systems.
Kitploit recommended
itssmikefm/cve-2020-1472Python exploit for CVE-2020-1472 (Zerologon) targeting Netlogon authentication to compromise Active Directory domain controllers and escalate…
trailer2/dll-planting-slack-4.33.73-cve-2023-38820DLL Planting in the Slack 4.33.73 - CVE-2023-38820
dr4g0n23/cve-2020-1472Exploit script for CVE-2020-1472 (ZeroLogon) with automated privilege escalation, credential dumping via secretsdump, and lateral movement using…
pamoutaf/cve-2024-34329Proof-of-concept exploit for a local privilege escalation vulnerability in Datacard XPS Card Printer Driver via insecure file permissions and DLL…
charlesgargasson/cve-2024-32002Exploit for CVE-2024-32002, a Git RCE vulnerability that uses recursive submodule cloning and symlinks to execute arbitrary commands on Windows and…
glorisonlai/printnightmareProof-of-concept implementation of CVE-2021-34527 (PrintNightmare) for exploiting Windows Print Spooler remote code execution and privilege…
fastmo/cve-2022-28672CVE-2022-28672 Vulnerabilidad Foxit PDF Reader - UaF - RCE - JIT Spraying
adminempire/meshdeckMeshDeck port for Arch Linux ARM - Wilson
3t4n/samba-3.0.24-cve-2007-2447-vunerable-Vulnerable Samba 3.0.24 environment for reproducing CVE-2007-2447 command execution, intended for exploit testing and security research.
mselbrede/gardynCVE-2025-29628, CVE-2025-29629, CVE-2025-29630, CVE-2025-29631
sp4cedogy/npe-cs-v-cve-2021-1675Exploit code for CVE-2021-1675, a Windows Print Spooler remote code execution vulnerability, demonstrating the attack and providing a…
d0n601/pwncityInsecure TeamCity CI environment for hands-on penetration testing training: reconnaissance, credential theft, privilege escalation, and lateral…
saharattackit/cve-2020-1472Exploit for CVE-2020-1472 (Zerologon) targeting Windows Netlogon to achieve privilege escalation and domain controller compromise.
kamalx06/tornadoc2Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, ECDSA-signed tasking, and a multi-operator team server with…
capture0x/adstrikeAI-powered modular Active Directory red-team framework for authorized penetration testing, AD enumeration, attack-path analysis, Kerberos/ADCS…
powershellmafia/powersploitPowerSploit - A PowerShell Post-Exploitation Framework
byt3bl33d3r/crackmapexecA swiss army knife for pentesting networks
