#1Tools for maintaining long-term access to compromised systems, even after reboots.
Kitploit recommended
rapid7/metasploit-frameworkOpen-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…
gentilkiwi/mimikatzA little tool to play with Windows security
fortra/impacketPython library for low-level network protocol manipulation, featuring SMB, MSRPC, Kerberos, and WMI implementations with tools for authentication…
peass-ng/peass-ngPEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
lolbas-project/lolbasLiving Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
bishopfox/sliverAdversary Emulation Framework
bmax121/apatchThe patching of Android kernel and Android system
samyk/poisontapExploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using…
karma9874/androratA Simple android remote administration tool using sockets. It uses java on the client side and python on the server side
mantvydasb/redteaming-tactics-and-techniquesComprehensive red teaming notes covering offensive security techniques including code injection, defense evasion, lateral movement, and persistence,…
ne0nd0g/merlinMerlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
pennyw0rth/netexecPost-exploitation framework for automated network authentication testing, credential harvesting, and lateral movement across Windows/AD environments…
alessandroz/lazagneCross-platform credential recovery tool that extracts stored passwords from browsers, email clients, databases, system mechanisms, and network…
m0nad/diamorphineLKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
its-a-feature/mythicA collaborative, multi-platform, red teaming framework
malwaredllc/byobAn open-source post-exploitation framework for students, researchers and developers.
gtworek/psbitsSimple (relatively) things allowing you to dig a bit deeper than usual.
infosecn1nja/ad-attack-defenseAttack and defend active directory using modern post exploitation adversary tradecraft activity
