#1Tools for maintaining access, exploring, and expanding control within compromised systems and networks.
Kitploit recommended
ghostpack/sharpdpapiSharpDPAPI is a C# port of some Mimikatz DPAPI functionality.
bignerd95/chimay-redWorking POC of Mikrotik exploit from Vault 7 CIA Leaks
nccgroup/pmapperA tool for quickly evaluating IAM permissions in AWS.
sairson/yasso强大的内网渗透辅助工具集-让Yasso像风一样 支持rdp，ssh，redis，postgres，mongodb，mssql，mysql，winrm等服务爆破，快速的端口扫描，强大的web指纹识别，各种内置服务的一键利用（包括ssh完全交互式登陆，mssql提权，redis一键利用，mysql数据库…
ridter/nopacExploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user
sinfulz/justtryharderComprehensive penetration testing cheat sheet for PWK/OSCP exam preparation, covering privilege escalation, password cracking, payload generation,…
the-viper-one/psmapexecDominate Active Directory with PowerShell.
paulsec/twittorA fully featured backdoor that uses Twitter as a C&C server
ghostpack/pspkiauditPowerShell toolkit for AD CS auditing based on the PSPKI toolkit.
tylous/zipexecA unique technique to execute binaries from a password protected zip
adrecon/adreconPowerShell tool that extracts Active Directory artifacts via LDAP or ADWS and generates Excel reports for auditing, DFIR, and penetration testing.
chaitin/veinmind-toolsveinmind-tools 是由长亭科技自研，基于 veinmind-sdk 打造的容器安全工具集
scorpioneslabs/mssqlpwnerAdvanced MSSQL penetration testing tool for lateral movement, command execution, NTLM relay, and brute-force attacks via linked servers and multiple…
paradigmxyz/iron-proxyAn egress firewall for untrusted workloads.
ad-security/ad_minerAD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security…
capture0x/adstrikeAI-powered modular Active Directory red-team framework for authorized penetration testing, AD enumeration, attack-path analysis, Kerberos/ADCS…
sailay1996/awesome_windows_logical_bugscollect for learning cases
mayyhem/sharpsccmC# post-exploitation tool for abusing Microsoft Configuration Manager (SCCM) to perform lateral movement, credential gathering, and NTLM…
