#1Tools for maintaining access, exploring, and expanding control within compromised systems and networks.
Kitploit recommended
cdk-team/cdk📦 Make security testing of K8s, Docker, and Containerd easier.
aydinnyunus/keyloggerGet Keyboard,Mouse,ScreenShot,Microphone Inputs from Target Computer and Send to your Mail.
k8gege/ladonLadon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。网络资产探测32…
ly4k/certipyTool for Active Directory Certificate Services enumeration and abuse
alpkeskin/mosintAutomated email OSINT tool that verifies emails, checks data breaches and password leaks, finds related emails/domains, scans pastebin dumps, and…
netspi/powerupsqlPowerUpSQL: A PowerShell Toolkit for Attacking SQL Server
netspi/microburstA collection of scripts for assessing Microsoft Azure security
byt3bl33d3r/offensivenimMy experiments in weaponizing Nim (https://nim-lang.org/)
voorivex/pentest-guidePenetration tests guide based on OWASP including test cases, resources and examples.
marten4n6/evilosxAn evil RAT (Remote Administration Tool) for macOS / OS X.
designativedave/androratRemote Administration Tool for Android devices
blacklanternsecurity/manspiderSpider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!
dominicbreuker/pspyMonitor linux processes without root permissions
thewover/donutGenerates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs…
r4j0x00/exploitsProof-of-concept exploit collection targeting Linux kernel LPE, sudo heap overflow, and Chrome V8 OOB write vulnerabilities for penetration testing.
monoxgas/srdiShellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode
byt3bl33d3r/silenttrinityAn asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR
integration-it/active-directory-exploitation-cheat-sheetA cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
