Post-Exploitation

tijme/amd-ryzen-master-driver-v17-exploit

Cobalt Strike (CS) Beacon Object File (BOF) for kernel exploitation using AMD's Ryzen Master Driver (version 17).

wh04m1001/cve-2023-29343

Proof-of-concept exploit for arbitrary file write in Sysmon 14.14, abusing Windows service tracing to achieve privilege escalation.

sec-consult/aggrokatz

Aggrokatz is an aggressor plugin extension for Cobalt Strike which enables pypykatz to interface with the beacons remotely and allows it to parse…

leo4j/invoke-sessionhunter

Retrieve and display information about active user sessions on remote computers. No admin privileges required.

yolop0wn/echodrv

Exploitation of echo_driver.sys

raffaele-forte/climber

Check UNIX/Linux systems for privilege escalation

logisek/evilmist

EvilMist is a collection of scripts and utilities designed to support cloud penetration testing & red teaming. The toolkit helps identify…

paranoidninja/brc4-bof-artillery

Collection of Brute Ratel C4 BOFs for Windows post-exploitation: process memory access, NetNTLMv2 hash retrieval, contact harvesting, and…

catzsec/forceadmin

⚡ Create infinite UAC prompts forcing a user to run as admin ⚡

zerodaylab/powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

bazad/rootsh

Local privilege escalation for OS X 10.10.5 via CVE-2016-1828.

r3ggi/electroniz3r

Take over macOS Electron apps' TCC permissions

smokeme/airstrike

Customizable Stage0 C2 framework with C and Rust agent templates, a Flask backend, and a React dashboard for building and operating your own C2…

ghostbyt3/windriver-exp

This repo contains PoCs for vulnerable Windows drivers.

jimywork/cromos

Cromos is a tool for downloading legitimate extensions of the Chrome Web Store and inject codes in the background of the application.

dviros/rat-via-telegram

Windows Remote Post Breach Tool via Telegram