#1Tools for maintaining access, exploring, and expanding control within compromised systems and networks.
Kitploit recommended
hacktricks-wiki/hacktricksWelcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
secdev/scapyPython-based interactive packet manipulation library for forging, decoding, sending, capturing, and analyzing network packets across a wide range of…
yaklang/yakitAll-in-one penetration testing platform with MITM proxy, web fuzzer, reverse connection handler, and plugin system for automated security testing and…
katrielmoses/mailaccessFree email OSINT tool, 2500+ platforms, identity clustering, breach detection. No API keys required. pip install mailaccess
mr-xn/penetration_testing_poc渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor…
ghosttroops/topTOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things
luckypipewrench/pipelockOpen-source AI agent firewall that scans HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injection, emitting verifiable…
securewithumer/cve-2026-pocsExploit-Index : The Ultimate CVE Proof of Concept (PoC) & Exploit Database. A zero-API, high-performance aggregator for 0days, vulnerabilities, and…
silentisvox/syscallrevenantClean Indirect Syscalls with Syscall Tampering.
ginlix-ai/langalphaAutomated OSINT framework for reconnaissance, data harvesting, and threat intelligence gathering with modular crawlers, scanners, and extraction…
infostealers-stats/data-breachA continuously updated resource that catalogs confirmed data breaches from across the globe. Each entry includes the breach name, usually aligned…
purpleailab/decepticonAutonomous Hacking Agent for Red Team
grisuno/lazyownRed team framework and multi-operator C2 platform with AI agents, malleable implants, rootkits, phishing engine, and 741 CLI commands covering the…
peass-ng/peass-ngPEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
captmag/maldevCreation of multiple Malware tools consisting of evasion, enumeration and exploitation
mr-un1k0d3r/azureredopsAzure RedOps is a offensive security toolkit for assessing the security posture of Microsoft Entra ID
pennyw0rth/netexecPost-exploitation framework for automated network authentication testing, credential harvesting, and lateral movement across Windows/AD environments…
wslyvh/paperweightPaperweight scans your inbox to map your digital footprint, then helps you take back control and delete your data. Local-first and open source.
