#1Tools for maintaining access, exploring, and expanding control within compromised systems and networks.
Kitploit recommended
silentisvox/syscallrevenantClean Indirect Syscalls with Syscall Tampering.
nt2dev/cve-2026-36213-pocCVE-2026-36213: MEmu Android Emulator 9.2.7.0 Local Privilege Escalation
g4bri-3l3/hostbadgerRead-only Windows host hardening auditor in PowerShell with optional AI analysis
g4bri-3l3/idwolfRead-only Active Directory & Microsoft Entra ID hygiene auditor in pure PowerShell. Collect once, analyze offline: deterministic findings, attack…
cplusplus17/deco-filepush-disclosureDisclosure and PoC for a root file read/write flaw in the TP-Link Deco XE75 Pro V3 debug channel (tmpsvr opcodes 0xC456/0xF0), with CVSS analysis and…
hexbytee/freepbx-sqli-rcePython proof-of-concept exploiting CVE-2025-57819, an unauthenticated SQL injection in FreePBX that chains admin creation, cron webshell deployment,…
abraxas/jellyfin-playlist-itemidsJellyfin Server 12.2 - High - Remote - IDOR - public playlist ItemIds leftover of GHSA-9x85 then unauth stream
abraxas/plausible-editor-invitePlausible Analytics master d44e104 - High - Remote - Privilege leftover - editor people HTML leaks transfer nanoid
abraxas/openmeetings-soap-user-rightsApache OpenMeetings 9.1.0 - High - Remote - Privilege leftover - SOAP POST /user copies UserDTO.rights including ADMIN
abraxas/openmeetings-stale-install-adminApache OpenMeetings 9.1.0 - High - Remote - Privilege leftover - stale /install wizard inserts second ADMIN
abraxas/vbox-guestctrl-copyfrom-dotdotVirtualBox 7.2.20 - High - Local - File write - Guest Control copy-from DOTDOT
abraxas/vbox-ovf-href-dest-escapeVirtualBox 7.2.20 - High - Local - File write - OVF href dest escape
abraxas/vbox-ovf-nat-tftp-prefixVirtualBox 7.2.20 - High - Local - File read - OVF NAT TFTP empty prefix
oscerd/cve-2026-78164Runnable proof-of-concept for CVE-2026-78164, demonstrating secret leakage when Apache Camel HTTP producers resolve property placeholders in…
kamalx06/tornadoc2Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, ECDSA-signed tasking, and a multi-operator team server with…
mein-0/knockgigaProof-of-concept local privilege escalation exploiting Gigabyte gdrv3.sys IOCTLs to write the SYSTEM token into a user process via an unchecked…
abraxas/pfsense-acb-restore-privpfSense CE 2.9.0-DEVELOPMENT - High - Remote - Privilege leftover - ACB restore
abraxas/pfsense-config-readonly-restorepfSense CE 2.9.0-DEVELOPMENT - High - Remote - Privilege leftover - readonly config_install
