#1Tools for maintaining access, exploring, and expanding control within compromised systems and networks.
Kitploit recommended
z4nzu/hackingtoolAll-in-one penetration testing toolkit aggregating 185+ tools across 20 categories including information gathering, web & wireless attacks, phishing,…
topjohnwu/magiskAndroid customization suite providing root access (MagiskSU), systemless module installation, boot image unpacking/repacking, and Zygisk runtime code…
swisskyrepo/payloadsallthethingsA list of useful payloads and bypass for Web Application Security and Pentest/CTF
rapid7/metasploit-frameworkOpen-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…
enaqx/awesome-pentestA collection of awesome penetration testing resources, tools and other shiny things
nmap/nmapHigh-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…
thingsboard/thingsboardOpen-source IoT Platform - Device management, data collection, processing and visualization.
manisso/fsocietyfsociety Hacking Tools Pack – A Penetration Testing Framework
vitalysim/awesome-hacking-resourcesA collection of hacking / penetration testing resources to make you better!
fortra/impacketPython library for low-level network protocol manipulation, featuring SMB, MSRPC, Kerberos, and WMI implementations with tools for authentication…
bettercap/bettercapThe Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
lolbas-project/lolbasLiving Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
peass-ng/peass-ngPEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
mr-xn/penetration_testing_poc渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor…
jpillora/chiselFast TCP/UDP tunnel over HTTP with SSH encryption, supporting reverse port forwarding, SOCKS5 proxy, and client authentication for secure network…
gentilkiwi/mimikatzA little tool to play with Windows security
hacktricks-wiki/hacktricksWelcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
gtfobins/gtfobins.github.ioGTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.
