#1Integrated platforms for developing, executing, and managing penetration tests.
Kitploit recommended
0x09al/cve-2017-11882-metasploitThis is a Metasploit module which exploits CVE-2017-11882 using the POC released here : https://embedi.com/blog/skeleton-closet-ms-office-vulnerabilit…
cobbr/c2bridgeC2Bridges allow developers to create new custom communication protocols and quickly utilize them within Covenant.
b0fh/cve-2018-4878Metasploit module for CVE-2018-4878
icmpoff/apache-2.4.49-2.4.50-traversal-remote-code-execution-exploitThis Metasploit module exploits an unauthenticated remote code execution vulnerability which exists in Apache version 2.4.49 (CVE-2021-41773). If…
fomovet/cve-2025-24054POC for CVE-2025-24054
gl4ssesbo1/nebulaNebula is a cloud C2 Framework, which at the moment offers reconnaissance, enumeration, exploitation, post exploitation on AWS, but still working to…
trustedsec/speculaModular command-and-control framework abusing Microsoft Outlook's Home Page feature for stealthy persistence, remote access, and post-exploitation.
acedef/synthaptPlaybook-based adversary simulation framework that compiles JSON-defined attack paths into position-independent shellcode payloads for validating…
sokarepo/coercedpotatordllReflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege
pucarasec/zuthakaOpen-source C2 integration framework providing a unified web interface for managing multiple command-and-control instances, listeners, agents, and…
outflanknl/external_c2POC for Cobalt Strike external C2
nccgroup/jwt-reauthCaches JWT authentication tokens from an auth URL and attaches them as headers to in-scope requests in Burp Suite for automated session handling.
factionsecurity/factionPen Test Report Generation and Assessment Collaboration
rasta-mouse/crystal-loadersA small collection of Crystal Palace PIC loaders designed for use with Cobalt Strike
jack-new-project/zeebsploitModular exploitation framework for penetration testing, featuring automated payload generation, reconnaissance modules, and post-exploitation…
pard0p/remote-bof-runnerRemote BOF Runner is a Havoc extension framework for remote execution of Beacon Object Files (BOFs) using a PIC loader made with Crystal Palace.
wetw0rk/exploit-developmentCVE-2020-8012, CVE-2016-10709, CVE-2017-17099, CVE-2017-18047, CVE-2019-1003000, CVE-2018-1999002
blacksnufkin/cheshireAdaptix C2 service plugin that drives LitterBox payload analysis from the operator UI.
