#1Tools for maintaining access, exploring, and expanding control within compromised systems and networks.
Kitploit recommended
sk4r4b/ntdll-reconstructionA technique that mixes NTDLL unhooking and hellsgate gate varients
abraxas/n8n-function-vm2Proof-of-concept and lab for an n8n 2.42.0 sandbox escape: hidden Function/FunctionItem nodes execute JS in the main process, giving authenticated…
abraxas/nextcloud-ldap-put-isadminNextcloud 35.0.0 — delegated Users admin can PUT-edit an LDAP-promoted admin that PATCH correctly refuses
abraxas/nextcloud-webhook-tokenneededNextcloud 35.0.0 — delegated Webhooks admin can mint a 1h admin app password via webhook update tokenNeeded
abraxas/mysql-set-role-leftoverMySQL Community Server 26.7.0 - High - SET ROLE ALL EXCEPT leftover FILE - mysqld UID write
abraxas/sqlite-fj-using-authSQLite 3.53.4 - High - Local - Privilege leftover - FULL JOIN USING skips sqlite3AuthRead
kaandemir993/overlord-rat-reverse-engineering-a-go-based-rat-injection-keylogging-c2-exfiltration-analysisFull static & memory analysis of Overlord RAT: Go agent architecture, HTTP/2 + WebSocket C2, reflective DLL injection, browser keylogging, and IOCs.…
gmh5225/logineo-scraperQuick script to scrape personal information from Logineo instances
abraxas/grafana-signup-invite-joinGrafana OSS 13.2.3 - High - Remote - Invite join - SignUpStep2 joins pending org invites without the code
abraxas/joomla-media-overrideJoomla 6.1.3 - High - Remote - Overwrite - media manager overwrite leftover
abraxas/phpmyadmin-issuperuserphpMyAdmin 5.2.3 - High - Remote - leftover - isSuperUser check skipped
abraxas/proftpd-site-copy-dest-followProFTPD 1.3.9d - High - Remote - Privilege leftover / File write - SITE COPY dest follows symlink
lcfr-hax/cve-2024-14027_slopExploits for CVE-2024-14027 creating using AI/Claude as a test.
itm4n/pentest-windowsCollection of Windows internals research and exploitation techniques covering privilege escalation, token abuse, and post-exploitation tricks for red…
karmanya03/overthroneAll-Rust Active Directory exploitation framework: LDAP/SMB/Kerberos enumeration, attack-graph pathfinding, Kerberoasting, NTLM relay, ticket forging,…
kypvas/ad_attack_architectureActive Directory Attack Architecture Map Comprehensive Pentest Reference — From Recon to Domain Dominance
kypvas/red-team-mapRed Team Operations Architecture Map Comprehensive Operator Reference — From Infrastructure to Impact
evkir/phantom-gridFree Burp Collaborator alternative- OOB interaction capture (HTTP/HTTPS/DNS) with SQLite & exfil reassembly
