#1Tools for maintaining access, exploring, and expanding control within compromised systems and networks.
Kitploit recommended

Minimalistic VT-x hypervisor for Windows x64 providing syscall, MSR, IDT, and kernel inline hooks plus EPT-based page substitution and TLB splitting.
Hide your Powershell script in plain sight. Bypass all Powershell security features

Exploit for CVE-2021-3156 (Baron Samedit), a heap-based buffer overflow in sudo, enabling local privilege escalation. Includes target list and…

Centralized data enrichment platform for offensive security assessments that ingests, enriches, and enables collaborative analysis of collected files…

This program is designed to demonstrate various process injection techniques

A root exploit for CVE-2022-0847 (Dirty Pipe)

Autonomous AI penetration testing agent that orchestrates multi-agent recon, exploitation, post-exploitation, and reporting with persistent…

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines.…

Crack any Microsoft Windows users password without any privilege (Guest account included)

A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

DCOM-based privilege escalation tool for Windows Server 2012-2022 and Windows 8-11, elevating users with ImpersonatePrivilege to NT AUTHORITY\SYSTEM…

Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)

A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.

Self-hosted dark web OSINT platform. Automated threat intelligence from query to graph in 13 steps. Free alternative to Recorded Future, DarkOwl, and…

A Collection of Over 60 Scripts - updated specifically for the BadUSB function on the FlipperZero.

Real-time geospatial OSINT platform aggregating flight, vessel, and satellite data with dark web search, social media dorking, and AI-powered…

Supershell C2 远控平台,基于反向SSH隧道获取完全交互式Shell

Red Team Cheatsheet in constant expansion.