#1Tools for maintaining long-term access to compromised systems, even after reboots.
Kitploit recommended
rapid7/metasploit-frameworkOpen-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…
fortra/impacketPython library for low-level network protocol manipulation, featuring SMB, MSRPC, Kerberos, and WMI implementations with tools for authentication…
lolbas-project/lolbasLiving Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
peass-ng/peass-ngPEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
gentilkiwi/mimikatzA little tool to play with Windows security
bishopfox/sliverAdversary Emulation Framework
malwaredllc/byobAn open-source post-exploitation framework for students, researchers and developers.
mantvydasb/redteaming-tactics-and-techniquesComprehensive red teaming notes covering offensive security techniques including code injection, defense evasion, lateral movement, and persistence,…
samyk/poisontapExploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using…
gtworek/psbitsSimple (relatively) things allowing you to dig a bit deeper than usual.
alessandroz/lazagneCross-platform credential recovery tool that extracts stored passwords from browsers, email clients, databases, system mechanisms, and network…
pennyw0rth/netexecPost-exploitation framework for automated network authentication testing, credential harvesting, and lateral movement across Windows/AD environments…
its-a-feature/mythicA collaborative, multi-platform, red teaming framework
hackerschoice/thc-tips-tricks-hacks-cheat-sheetVarious tips & tricks
infosecn1nja/ad-attack-defenseAttack and defend active directory using modern post exploitation adversary tradecraft activity
bc-security/empireEmpire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
ghostpack/seatbeltSeatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security…
ghostpack/rubeusTrying to tame the three-headed dog.
