#1Integrated platforms for developing, executing, and managing penetration tests.
Kitploit recommended
jack-new-project/zeebsploitModular exploitation framework for penetration testing, featuring automated payload generation, reconnaissance modules, and post-exploitation…
secureworks/whiskeysamlandfriendsPython-based framework for generating Golden SAML tokens, Kerberos tickets, and Azure Access Tokens to exploit federated identity systems and…
psmths/reaveWIP Post-exploitation framework tailored for hypervisors.
degenerat3/meteorA cross-platform C2/teamserver supporting multiple transport protocols, written in Go.
riswandans/litesploitlibrary and intepreter for penetration testing tools
nu11secur1ty/metasploit-framework-nu11secur1tyExtending of metasploit-framework
redsiege/graphstrikeCobalt Strike HTTPS beaconing over Microsoft Graph API
ryhanson/externalc2A library for integrating communication channels with the Cobalt Strike External C2 server
xorrior/ravenCobaltStrike External C2 for Websockets
mythicagents/nimplantA cross-platform implant written in Nim
smythtech/sdnpwnAn SDN penetration testing toolkit
codextf2/openmalleablec2Open Source Implementation of Cobalt Strike's Malleable C2
black-army-security/blackarmy-frameworkModular Python-based penetration testing framework for automated security assessments, exploitation, and red team operations. Includes modules for…
ntdelta/chakra-exploit-frameworkBrowser exploitation framework for Chakra (Edge). Written as part of OSEE preparation. Demo bug: CVE-2019-0567
shipsecai/studioWorkflow automation for Security Teams
und3rf10w/external_c2_frameworkPython api for usage with cobalt strike's External C2 specification
govindasamyarun/c2-cloudThe C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised…
qmadev/crabloaderRust-based User-Defined Reflective Loader for Cobalt Strike payloads. Avoids RWX memory pages for OPSEC safety. Includes an extractor tool for loader…
