#1Tools for maintaining access, exploring, and expanding control within compromised systems and networks.
Kitploit recommended
bytecode77/r77-rootkitFileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.
kurolabs/stegcloakHide secrets with invisible characters in plain text securely using passwords 🧙🏻♂️⭐
bsauce/kernel-exploit-factoryLinux kernel CVE exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environment…
threatexpress/malleable-c2Cobalt Strike Malleable C2 Design and Reference Guide
calebstewart/pwncatPost-exploitation platform automating enumeration, privilege escalation, persistence, and C2 operations via reverse/bind shells with cross-platform…
powershellempire/powertoolsCollection of offensive PowerShell projects for reconnaissance, privilege escalation, and post-exploitation during penetration testing engagements.
ohpe/juicy-potatoA sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT…
nil0x42/phpsploitFull-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
idov31/nidhoggWindows rootkit for Intel x64 with 25+ features, demonstrating rootkit techniques compatible with all Windows 10 and Windows 11 versions.
ekultek/whatbreachOSINT tool to find breached emails, databases, pastes, and relevant information
m57/dnstealDNS Exfiltration tool for stealthily sending files over DNS requests.
katrielmoses/mailaccessFree email OSINT tool, 2500+ platforms, identity clustering, breach detection. No API keys required. pip install mailaccess
nytrorst/netripperNetRipper - Smart traffic sniffing for penetration testers
googleprojectzero/sandbox-attacksurface-analysis-toolsSet of tools to analyze Windows sandboxes for exposed attack surface.
harleyqu1nn/aggressorscriptsCollection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources
rhinosecuritylabs/cvesProof-of-Concept exploits for CVEs found by the team at Rhino Security Labs
greshake/llm-securityProof-of-concept demos and research on indirect prompt injection attacks against application-integrated LLMs, covering data exfiltration, remote…
sysdream/ligoloReverse Tunneling made easy for pentesters, by pentesters https://sysdream.com/
