#1Tools for maintaining access, exploring, and expanding control within compromised systems and networks.
Kitploit recommended
cbwang505/cve-2020-1066-expLocal privilege escalation exploit for CVE-2020-1066 targeting Windows 7 and Server 2008 R2. Leverages arbitrary file replacement via Windows…
grahamhelton/uspEstablishes persistence on a Linux system by creating a udev rule that triggers the execution of a specified payload (binary or script)
0xsh3llf1r3/coldwerCobalt Strike BOF to freeze EDR/AV processes and dump LSASS using WerFaultSecure.exe PPL bypass
nvisosecurity/interceptorInterceptor is a kernel driver focused on tampering with EDR/AV solutions in kernel space
saadahla/d1rksleepImproved version of EKKO by @5pider that Encrypts only Image Sections
mstxq17/cve-2021-1675_rdl_lpePrintNightMare LPE提权漏洞的CS 反射加载插件。开箱即用、通过内存加载、混淆加载的驱动名称来ByPass Defender/EDR。
telefonica/uac-a-molaModular framework for Windows UAC bypass attacks and mitigation, featuring DLL hijacking, fileless execution, and real-time monitoring to detect and…
mnemonic-no/grafeoOpen platform for modelling, collection and exchange of knowledge
joshuagodwin7929/purple-team-automationAutomated adversary emulation (Caldera) against an AD lab to validate Sigma detection coverage and map results to MITRE ATT&CK.
hardenedlinux/userland-execUserland exec PoC to be used as attack vector technique
licitrasimone/crystalsliverCrystal Palace Evasion kit for Sliver
bishopfox/asminjectHeavily-modified fork of David Buchanan's dlinject project. Injects arbitrary assembly (or precompiled binary) payloads directly into x86-64, x86,…
retme7/cve-2014-4322_pocGain privileges:system -> root,as a part of https://github.com/retme7/CVE-2014-7911_poc
guhe120/windows-eopWindows EoP Bugs
d4rk007/sak1to-shellMulti-threaded, multi-os/platform (Linux/Windows) c2 server and Windows reverse TCP shell client both written in C.
ricardojoserf/sharpcoverttubeYoutube as C2 channel - Control Windows systems uploading QR videos to Youtube
