#1Tools for maintaining access, exploring, and expanding control within compromised systems and networks.
Kitploit recommended

Real-time geospatial OSINT platform aggregating flight, vessel, and satellite data with dark web search, social media dorking, and AI-powered…
pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully…

Remote operations commands implemented using Beacon Object Files

Exchange your privileges for Domain Admin privs by abusing Exchange

对密码已保存在 Windwos 系统上的部分程序进行解析,包括:Navicat,TeamViewer,FileZilla,WinSCP,Xmangager系列产品(Xshell,Xftp)。源码:https://github.com/RowTeam/SharpDecryptPwd

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

Python version of the C# tool for "Shadow Credentials" attacks

Inception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard,…

Curated collection of offensive security tools and commands for Active Directory attacks, C2, privilege escalation, obfuscation, and web pentesting.

A deliberately vulnerable Microsoft Entra ID environment. Learn identity security through hands-on, realistic attack challenges.

Post-exploitation tool for identifying, profiling, and attacking Microsoft SCCM assets within Active Directory domains, streamlining credential…

PowerShell ReverseTCP Shell - Framework

Self contained htaccess shells and attacks

Windows Remote-Access-Trojan

TOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

PCI Express DIY hacking toolkit for Xilinx SP605. This repository is also home of Hyper-V Backdoor and Boot Backdoor, check readme for links and info

MSDAT: Microsoft SQL Database Attacking Tool