#1Tools for maintaining access, exploring, and expanding control within compromised systems and networks.
Kitploit recommended
knqyf263/redis-exploitationCONFIG SET
knqyf263/redis-post-exploitationEducational Redis rogue server tool for post-exploitation. Deploys a malicious Redis server to achieve remote code execution and execute arbitrary…
ianxtianxt/bypass360mimikatz_x64Modified mimikatz binary with resource modification and digital signature to evade 360 Antivirus detection for credential dumping in penetration…
ianxtianxt/ecologyexp.jar泛微oa数据库配置文件读取
ianxtianxt/ssocks-0.0.14SOCKS proxy for port forwarding and RDP tunneling, enabling lateral movement and remote access in penetration testing scenarios.
ianxtianxt/sharpdecryptpwdWindows常用程序密码读取工具：SharpDecryptPwd
ianxtianxt/win-exp-windwos辅助提权脚本
corelight/petitpotam-notestZeek package for detecting PetitPotam NTLM relay attacks via EFS DCERPC over unencrypted SMB, distinguishing successful and unsuccessful exploit…
corelight/zerologonZeek package to detect Zerologon
qfmy1024/cve-2023-6654CVE-2023-6654 EXP
nxploited/cve-2026-0920-LA-Studio Element Kit for Elementor <= 1.5.6.3 - Unauthenticated Privilege Escalation via Backdoor to Administrative User Creation via lakit_bkrole…
nxploited/cve-2026-1492User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration
nxploited/cve-2026-1937YayMail <= 4.3.2 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Options Update via 'yaymail_import_state' AJAX Action
nxploited/cve-2026-27542-cve-2026-27540-Unauthenticated Privilege | Unauthenticated Arbitrary File Upload
nxploited/cve-2026-39987marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability
nxploited/cve-2026-4484Masteriyo LMS <= 2.1.6 - Missing Authorization to Authenticated (Student+) Privilege Escalation to Administrator
bishopfox/otto-supportAn implementation of a vulnerable MCP server using mcp-go
synacktiv/bissapA new open-source tool to quickly audit SAP permissions.
