#1Tools for maintaining access, exploring, and expanding control within compromised systems and networks.
Kitploit recommended
fortra/cve-2024-6769Technical writeup and PoC for CVE-2024-6769, chaining DLL hijacking with activation cache poisoning to escalate from medium to high integrity on…
rhinosecuritylabs/iamactionhunterAn AWS IAM policy statement parser and query tool.
quentinhardy/pytmipePython library and client for token manipulations and impersonations for privilege escalation on Windows
bishopfox/firecatFirecat is a penetration testing tool that allows you to punch reverse TCP tunnels out of a compromised network.
kr1shn4murt1/get_team_passGet teamviewer's ID and password from a remote computer in the LAN
kkent030315/cve-2022-42046Proof-of-concept exploit for CVE-2022-42046 demonstrating local privilege escalation via direct kernel object manipulation of EPROCESS Protection and…
sv3nbeast/cve-2019-1388guest→system（UAC手动提权）
mwr-cybersec/veeamdumper-bofA credential extraction BOF for Veeam Backup and Replication and Veeam One
alephsecurity/initrootMotorola Untethered Jailbreak: Exploiting CVE-2016-10277 for Secure Boot and Device Locking bypass
joaoviictorti/rustbofA template for writing Beacon Object Files (BOFs) in Rust
cisc0-gif/kitt-litePython-Based Pentesting CLI Tool
killswitch-gui/hotload-driverC++
michalbednarski/resourcepoisonWriteup and exploit for CVE-2025-22441: Privilege escalation from installed app to SystemUI process on Android due to pass of untrusted…
praetorian-inc/oauthseekerA malicious OAuth application that can be leveraged for both internal and external phishing attacks targeting Microsoft Azure and Office365 users.
ysanatomic/io_uring_lpe-cve-2024-0582LPE exploit for CVE-2024-0582 (io_uring)
3gstudent/ntfsdumpUse to copy a file from an NTFS partitioned volume by reading the raw volume and parsing the NTFS structures.
nccgroup/windowsdaclenumprojectA collection of tools to enumerate and analyse Windows DACLs
