#1Tools for maintaining access, exploring, and expanding control within compromised systems and networks.
Kitploit recommended
yucaerin/cve-2026-3584CVE-2026-3584
synacktiv/gpoparsergpoParser is a tool designed to extract and analyze configurations applied through Group Policy Objects (GPOs) in an Active Directory environment.
nccgroup/async-pico-hubAsync PICO Hub is a work-in-progress framework to extend Cobalt Strike with custom event monitoring and in-process Asynchronous BOFs
synacktiv/metamorphA command-line utility for Windows written in C that creates and configures persistent Event Tracing for Windows (ETW) AutoLogger sessions.
murdok1982/exploit-poc-para-cve-2024-30085Exploit en Python diseñado para aprovechar la vulnerabilidad de elevación de privilegios CVE-2024-30085
synacktiv/prox-ezHTTP/HTTPS interception proxy for testing Windows authentication mechanisms, supporting NTLM, Kerberos, pass-the-hash, pass-the-ticket and relay…
synacktiv/sccmsqlclientMSSQL client for SCCM environments, enabling reconnaissance, remote PowerShell execution on managed clients, and extraction of sensitive secrets such…
5kr1pt/glpi-logbleedPoC for CVE-2026-53629, blind SQL injection in the GLPI history log filter
dnlid/cve-2026-43499CVE-2026-43499: Linux kernel futex PI use-after-free research package
cduram/notcve-2026-0010Unauthenticated IPC Local Privilege Escalation to SYSTEM via Debauchee Barrier Daemon TCP Port 24801
soralis0912/cve-2026-43499-pmg110-rootAndroid LPE exploit for CVE-2026-43499 targeting OPPO PMG110 (kernel 6.6). Uses futex PI UAF to gain root and install a su daemon via LD_PRELOAD.
soralis0912/cve-2026-43499-warhol-rootLocal privilege escalation exploit targeting CVE-2026-43499 for the Xiaomi 17T Pro (warhol) on Android 16 with MediaTek MT6993 SoC.
rails/rails-forensics-cve-2026-66066Forensic toolkit and agent skills for investigating Rails Active Storage/libvips CVE-2026-66066: detects crafted blob indicators, exposure windows,…
synacktiv/sccm_sql_backdoorExploit CVE-2024-43468 and CVE-2025-59213 to implant a controlled backdoor into SCCM Management Point's SQL stored procedure, enabling remote SQL…
jenderal92/shadow-vaultShadow Vault – Add shadow users with SHA-512 hash, auto aging match, multiple write fallbacks.
0xjohnnydev/cve-2026-28992-iohidfamily-fastpathuserclient-race-conditionsUAF and AOP coprocessor panic in IOHIDEventServiceFastPathUserClient. No entitlements, reachable from app sandbox.
0xdea/raptor_infiltrate19#INFILTRATE19 raptor's party pack.
0xdea/raptor_infiltrate20#INFILTRATE20 raptor's party pack.
