#1Tools for maintaining access, exploring, and expanding control within compromised systems and networks.
Kitploit recommended
quentinhardy/odatPenetration testing tool for Oracle Databases that discovers valid SIDs, brute-forces credentials, escalates privileges to DBA, executes system…
reverseclabs/c3Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive…
cobbr/sharpsploitSharpSploit is a .NET post-exploitation library written in C#
arthepsy/cve-2021-4034Proof-of-concept exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec, allowing unprivileged users to…
med0x2e/sigflipSigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.
ly4k/pwnkitSelf-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation
danmcinerney/icebreakerGets plaintext Active Directory credentials if you're on the internal network but outside the AD environment
7etsuo/windows-api-function-cheatsheetsA reference of Windows API function calls, including functions for file operations, process management, memory management, thread management,…
ne0nd0g/go-shellcodeA repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques.
s3cur3th1ssh1t/offensivevbaThis repo covers some code execution and AV Evasion methods for Macros in Office documents
p0dalirius/coercerA python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.
uber-common/mettaAn information security preparedness tool to do adversarial simulation.
dagrz/aws_pwnA collection of AWS penetration testing junk
yuanyuanxiang/simpleremoterA remote control program based on Gh0st: 实现了终端管理、进程管理、窗口管理、远程桌面、文件管理、语音管理、视频管理、服务管理、注册表管理等功能，优化全部代码及整理排版，修复内存泄漏缺陷，程序运行稳定。项目代码仅限于学习和交流用途。
xaitax/chrome-app-bound-encryption-decryptionBypass Chromium's App-Bound Encryption via Direct Syscall-based Reflective Process Hollowing. Extract cookies, passwords, payment methods & tokens…
redbyte1337/graphspyInitial Access and Post-Exploitation Tool for Entra ID and M365 with a browser-based GUI
josh0xa/darkdumpOpen Source Intelligence Interface for Deep Web Scraping
sadpainy/stuxnetEducational reconstruction of the Stuxnet worm for malware analysis and defensive research. Includes modules for privilege escalation, rootkit…
