#1Custom payload crafting, obfuscation, AV evasion, and delivery mechanism tools.
Kitploit recommended
hakluke/weaponised-xss-payloadsXSS payloads designed to turn alert(1) into P1
0xdea/tactical-exploitationModern tactical exploitation toolkit.
luemmelsec/pentest-tools-collectionCurated collection of offensive security tools and commands for Active Directory attacks, C2, privilege escalation, obfuscation, and web pentesting.
specterops/skillsReusable offensive security skills and plugins for AI agents, covering reconnaissance, exploitation, C2, payload development, and reporting across…
vxunderground/vxug-papersResearch code & papers from members of vx-underground.
outflanknl/c2-tool-collectionA collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.
trustedsec/coffloaderRun Beacon Object Files (BOFs) outside Cobalt Strike by parsing 64-bit COFF object files, with Beacon-compatible argument generation and helper…
nytrorst/shellcodecompilerShellcode Compiler
msanft/cve-2025-55182PoC exploit for CVE-2025-55182, demonstrating remote code execution in React Server Functions via prototype pollution and a crafted Flight Protocol…
med0x2e/sigflipSigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.
reverseclabs/c3Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive…
cobbr/sharpsploitSharpSploit is a .NET post-exploitation library written in C#
r00t-3xp10it/fakeimageexploiterUse a Fake image.jpg to exploit targets (hide known file extensions)
s3cur3th1ssh1t/offensivevbaThis repo covers some code execution and AV Evasion methods for Macros in Office documents
7etsuo/windows-api-function-cheatsheetsA reference of Windows API function calls, including functions for file operations, process management, memory management, thread management,…
ne0nd0g/go-shellcodeA repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques.
0vercl0k/rpFast C++ ROP gadget finder for PE/ELF/Mach-O binaries across x86/x64/ARM/ARM64 architectures, enabling efficient return-oriented programming chain…
sadpainy/stuxnetEducational reconstruction of the Stuxnet worm for malware analysis and defensive research. Includes modules for privilege escalation, rootkit…
