#1Tools for maintaining access, exploring, and expanding control within compromised systems and networks.
Kitploit recommended
abraxas/plausible-editor-invitePlausible Analytics master d44e104 - High - Remote - Privilege leftover - editor people HTML leaks transfer nanoid
abraxas/openmeetings-soap-user-rightsApache OpenMeetings 9.1.0 - High - Remote - Privilege leftover - SOAP POST /user copies UserDTO.rights including ADMIN
abraxas/openmeetings-stale-install-adminApache OpenMeetings 9.1.0 - High - Remote - Privilege leftover - stale /install wizard inserts second ADMIN
abraxas/vbox-guestctrl-copyfrom-dotdotVirtualBox 7.2.20 - High - Local - File write - Guest Control copy-from DOTDOT
abraxas/vbox-ovf-href-dest-escapeVirtualBox 7.2.20 - High - Local - File write - OVF href dest escape
abraxas/vbox-ovf-nat-tftp-prefixVirtualBox 7.2.20 - High - Local - File read - OVF NAT TFTP empty prefix
oscerd/cve-2026-78164Runnable proof-of-concept for CVE-2026-78164, demonstrating secret leakage when Apache Camel HTTP producers resolve property placeholders in…
kamalx06/tornadoc2Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, ECDSA-signed tasking, and a multi-operator team server with…
mein-0/knockgigaProof-of-concept local privilege escalation exploiting Gigabyte gdrv3.sys IOCTLs to write the SYSTEM token into a user process via an unchecked…
abraxas/pfsense-acb-restore-privpfSense CE 2.9.0-DEVELOPMENT - High - Remote - Privilege leftover - ACB restore
abraxas/pfsense-config-readonly-restorepfSense CE 2.9.0-DEVELOPMENT - High - Remote - Privilege leftover - readonly config_install
abraxas/pfsense-ldap-name-collisionpfSense CE 2.9.0-DEVELOPMENT - High - Remote - Privilege leftover - LDAP admin name
capture0x/confirmescLinux privesc enumerator that confirms exploitability and gives you the exact root shell command - no GTFOBins searching. MCP server + AI-agent…
abraxas/pfsense-uploadconfigpfSense CE 2.9.0-DEVELOPMENT - High - Remote - Privilege leftover - hidden uploadconfig
abraxas/pfsense-wizard-uid0pfSense CE 2.9.0-DEVELOPMENT - High - Remote - Privilege leftover - wizard uid 0
capture0x/adstrikeAI-powered modular Active Directory red-team framework for authorized penetration testing, AD enumeration, attack-path analysis, Kerberos/ADCS…
owasp/piihunterScans PostgreSQL databases and Jira issues for PII using regex, NER/ML, and optional self-hosted LLM detection, with redacted reports and audit…
abraxas/pfsense-api-acb-userkeypfSense Plus MIM API toolkit b4acd7ca - High - Remote - IDOR - ACB userkey capability URL
