Post-Exploitation

specterops/bloodhound

Six Degrees of Domain Admin

sensepost/regeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

netspi/microburst

A collection of scripts for assessing Microsoft Azure security

0x4d31/awesome-oscp

A curated list of awesome OSCP resources

rhinosecuritylabs/pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

wszf/androrat

androrat

0xthirteen/sharprdp

Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

t3l3machus/hoaxshell

A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.

liamg/traitor

⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

m0nad/diamorphine

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)

fuzzysecurity/powershell-suite

My musings with PowerShell

jonaslejon/malicious-pdf

Generate malicious PDF test files for penetration testing, bug bounty hunting, and red teaming. Tests SSRF, XSS, XXE, NTLM credential theft, and data…

aydinnyunus/keylogger

Get Keyboard,Mouse,ScreenShot,Microphone Inputs from Target Computer and Send to your Mail.

msnightmare/rogueplanet

Race-condition exploit for Windows Defender vulnerability that escalates privileges to SYSTEM shell. Tested on Windows 10 and 11, with potential…

dominicbreuker/pspy

Monitor linux processes without root permissions

ne0nd0g/merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

ghostpack/rubeus

Trying to tame the three-headed dog.