#1Tools for maintaining access, exploring, and expanding control within compromised systems and networks.
Kitploit recommended
nicocha30/ligolo-ngAn advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
jonaslejon/malicious-pdfGenerate malicious PDF test files for penetration testing, bug bounty hunting, and red teaming. Tests SSRF, XSS, XXE, NTLM credential theft, and data…
bc-security/empireEmpire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
ghostpack/seatbeltSeatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security…
lgandx/responderResponder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2,…
hackerschoice/thc-tips-tricks-hacks-cheat-sheetVarious tips & tricks
entysec/ghostGhost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device.
adaptix-framework/adaptixc2AdaptixC2 is a highly modular advanced redteam toolkit
nathanlopez/stitchPython Remote Administration Tool (RAT)
guardicore/monkeyInfection Monkey - An open-source adversary emulation platform
itm4n/privesccheckPrivilege Escalation Enumeration Script for Windows
specterops/bloodhoundSix Degrees of Domain Admin
hackplayers/evil-winrmThe ultimate WinRM shell for hacking/pentesting
agwa/git-cryptTransparent file encryption in git
rapid7/metasploit-payloadsUnified repository for different Metasploit Framework payloads
pentestmonkey/php-reverse-shellPHP script that establishes a reverse shell from a target server to the attacker's machine, enabling remote command execution and post-exploitation…
zer0yu/awesome-cobaltstrikeList of Awesome CobaltStrike Resources
samugit83/redamonAutonomous AI red team framework that chains reconnaissance, exploitation, and post-exploitation into a single pipeline, then triages findings,…
