#1Tools for maintaining access, exploring, and expanding control within compromised systems and networks.
Kitploit recommended
specterops/bloodhound-legacySix Degrees of Domain Admin
ne0nd0g/merlinMerlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
secwiki/linux-kernel-exploitslinux-kernel-exploits Linux平台提权漏洞集合
mantvydasb/redteaming-tactics-and-techniquesComprehensive red teaming notes covering offensive security techniques including code injection, defense evasion, lateral movement, and persistence,…
pennyw0rth/netexecPost-exploitation framework for automated network authentication testing, credential harvesting, and lateral movement across Windows/AD environments…
v4bel/dirtyfragLinux kernel privilege escalation exploit chaining two page-cache write vulnerabilities (CVE-2026-43284, CVE-2026-43500) for deterministic root…
alessandroz/lazagneCross-platform credential recovery tool that extracts stored passwords from browsers, email clients, databases, system mechanisms, and network…
hfiref0x/uacmeDefeating Windows User Account Control
meshcore-dev/meshcoreA new lightweight, hybrid routing mesh protocol for packet radios
samratashok/nishangNishang - Offensive PowerShell for red team, penetration testing and offensive security.
x0rz/eqgrpDecrypted content of eqgrp-auction-file.tar.xz
bee-san/pywhat🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it…
flangvik/sharpcollectionNightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps…
its-a-feature/mythicA collaborative, multi-platform, red teaming framework
theori-io/copy-fail-cve-2026-31431Exploits a 9-year-old Linux kernel local privilege escalation (CVE-2026-31431); provides tested exploit logic for Ubuntu, Amazon Linux, RHEL, and…
malwaredllc/byobAn open-source post-exploitation framework for students, researchers and developers.
gtworek/psbitsSimple (relatively) things allowing you to dig a bit deeper than usual.
infosecn1nja/ad-attack-defenseAttack and defend active directory using modern post exploitation adversary tradecraft activity
