#1Tools for maintaining access, exploring, and expanding control within compromised systems and networks.
Kitploit recommended
stephenfewer/reflectivedllinjectionReflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a…
ghostpack/certifyC# tool for enumerating and exploiting misconfigurations in Active Directory Certificate Services (AD CS), enabling certificate template abuse,…
ignitetechnologies/privilege-escalationThis cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.
six2dez/pentest-bookCurated penetration testing wiki with daily-updated techniques, scripts, and checklists for reconnaissance, web, cloud, mobile, and…
sensepost/regeorgThe successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.
0x4d31/awesome-oscpA curated list of awesome OSCP resources
liamg/traitor:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w…
hfiref0x/kduWindows kernel driver utility that abuses vulnerable signed drivers (BYOVD) to bypass DSE, load unsigned drivers, hijack protected processes, and…
yukonga/ghostlock-appGhostLock One-Tap Execution App (CVE-2026-43499)
t3l3machus/hoaxshellA Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.
funnywolf/viperAdversary simulation and Red teaming platform with AI
m0nad/diamorphineLKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)
rhinosecuritylabs/pacuThe AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
i-am-shodan/usbarmyknifeUSB Army Knife – the ultimate close access tool for penetration testers and red teamers.
matheuzsecurity/singularityStealthy Linux kernel rootkit (LKM) for 6.x kernels with advanced process/network hiding, privilege escalation, and comprehensive evasion of eBPF…
fuzzysecurity/powershell-suiteMy musings with PowerShell
ghostpack/rubeusTrying to tame the three-headed dog.
