Penetration Testing Frameworks

g0d150ne/wp2shell

Modular WordPress pre-auth exploit framework chaining SQL injection and authentication bypass to deliver remote code execution, interactive shells,…

bc-security/empire

Encrypted C2 and post-exploitation framework for red teams, with modular PowerShell/Python/C#/Go agents, many offensive modules, and easy…

xforcered/bokuloader

A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!

henkru/cs-token-vault

In-memory token vault BOF for Cobalt Strike

zerodaylab/powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

aniqfakhrul/powerview.py

Enumerate and attack Active Directory with LDAP session persistence, ACL abuse, Kerberoasting/ASREProasting, shadow credentials, RBCD, and NTLM relay.

b23r0/heroinn

A cross platform C2/post-exploitation framework.

facebookincubator/ttpforge

Adversary simulation framework for authoring and automating attacker TTPs as repeatable YAML scenarios, helping red and blue teams validate detection…

fortra/no-consolation

A BOF that runs unmanaged PEs inline

sokarepo/coercedpotatordll

Reflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege

cobalt-strike/unhook-bof

Remove API hooks from a Beacon process.

rasta-mouse/crystal-loaders

A small collection of Crystal Palace PIC loaders designed for use with Cobalt Strike

luemmelsec/apex

Azure Post Exploitation Framework

r00t-3xp10it/msf-auxiliarys

My collection of metasploit auxiliary post-modules