#1Tools for maintaining access, exploring, and expanding control within compromised systems and networks.
Kitploit recommended
captmag/maldevCreation of multiple Malware tools consisting of evasion, enumeration and exploitation
mr-un1k0d3r/azureredopsAzure RedOps is a offensive security toolkit for assessing the security posture of Microsoft Entra ID
pennyw0rth/netexecPost-exploitation framework for automated network authentication testing, credential harvesting, and lateral movement across Windows/AD environments…
wslyvh/paperweightPaperweight scans your inbox to map your digital footprint, then helps you take back control and delete your data. Local-first and open source.
cplusplus17/deco-filepush-disclosureDisclosure and PoC for a root file read/write flaw in the TP-Link Deco XE75 Pro V3 debug channel (tmpsvr opcodes 0xC456/0xF0), with CVSS analysis and…
deancyl/s9180-rootmygalaxyRootMyGalaxy for Galaxy S23 Ultra SM-S9180 (FZG1) - temp root via CVE-2026-43499, KernelSU late-load, no partition flashing, no Knox
neffisback/wsuksAutomating the MITM attack on WSUS
samugit83/redamonAutonomous AI red team framework that chains reconnaissance, exploitation, and post-exploitation into a single pipeline, then triages findings,…
promptfoo/modelauditSecurity scanner for AI/ML model files. Detects malicious code, backdoors, and vulnerabilities before deployment
katrielmoses/voidaccessSelf-hosted dark web OSINT platform. Automated threat intelligence from query to graph in 13 steps. Free alternative to Recorded Future, DarkOwl, and…
abraxas/plausible-editor-invitePlausible Analytics master d44e104 - High - Remote - Privilege leftover - editor people HTML leaks transfer nanoid
nuguardai/nuguardopensource repo for validating agentic AI applications: redteam, behavior, supply-chain, static analysis
abraxas/jellyfin-playlist-itemidsJellyfin Server 12.2 - High - Remote - IDOR - public playlist ItemIds leftover of GHSA-9x85 then unauth stream
manuelschipper/naha guard that blocks catastrophic agent actions
jonaslejon/malicious-pdfGenerate malicious PDF test files for penetration testing, bug bounty hunting, and red teaming. Tests SSRF, XSS, XXE, NTLM credential theft, and data…
nanoturtle1145/root-my-s24Using CVE-2026-43499 to root your Galaxy S24 Series(SM-S92X0 ,(China / Hong Kong SAR / Taiwan))
iulianvostrut/contexthoundStatic analysis CLI that scans codebases for LLM prompt-injection, data-exfiltration, jailbreak, and unsafe agent/tool vulnerabilities. Runs fully…
cleasbycode/jdvrifSteganography Tool for JPG Images
