#1Tools for maintaining access, exploring, and expanding control within compromised systems and networks.
Kitploit recommended
pinoywh1z/c99shell-php7PHP 7 and safe-build Update of the popular C99 variant of PHP Shell.
zh54321/snafflerparserParses Snaffler output file and generate beautified outputs.
panagioto/sharpexchangeprivA C# implementation of PrivExchange by @_dirkjan.
wkl-sec/wmiexecSet of python scripts which perform different ways of command execution via WMI protocol.
ad0nis/ntlm_relay_gatAutomates NTLM relay exploitation using ntlmrelayx.py for SMB share enumeration, shell execution, secrets dumping, and MSSQL command execution via…
incursi0n/bluesamA Cobalt Strike Beacon Object File that exploits the BlueHammer vulnerability that to obtain a copy of the SAM database.
harryanon/r0akWindows command-line utility for reading, writing, and executing kernel-mode code from Administrator context using a font validation execution…
withsecurelabs/doublepulsar-usermode-injectorA utility to use the usermode shellcode from the DOUBLEPULSAR payload to reflectively load an arbitrary DLL into another process, for use in testing…
ze0r/cve-2018-8453-expcve-2018-8453 exp
math1as/cve-2020-1337-exploitCVE-2020-1337 Windows Print Spooler Privilege Escalation
mr-un1k0d3r/redteamscriptsCollection of offensive red team scripts including process termination, SPF bypass for phishing, password spraying, and ColdFusion password…
paranoidninja/boomerangAgent-server HTTP+TCP tunneling tool for exposing multiple internal services to external networks. Supports multi-level pivoting and SOCKS proxy…
josue87/boomerFramework for exploiting local vulnerabilities
nccgroup/outlookleaktestThe Outlook HTML Leak Test Project
hackedteam/rcs-dbDatabase components for RCS backend
ripits-sec/couchpotatoWindows privilege escalation tool that patches ETW and AMSI and uses indirect syscalls to abuse SeImpersonatePrivilege, escalating service accounts…
nuguardai/nuguardopensource repo for validating agentic AI applications: redteam, behavior, supply-chain, static analysis
synacktiv/dlhellLocal & remote Windows DLL Proxying
