#1Tools for maintaining access, exploring, and expanding control within compromised systems and networks.
Kitploit recommended
digiprosec/microtrickSelf-contained Python PoC exploiting the MikroTrick SSH chain (CVE-2026-86060, CVE-2026-67279) to gain unauthenticated full admin access on MikroTik…
qax-a-team/mscachea tool to manipulate dcc(domain cached credentials) in windows registry, based mainly on the work of mimikatz and impacket
rasta-mouse/ppenumSimple BOF to read the protection level of a process
jbaines-r7/shakeitoffWindows MSI Installer LPE (CVE-2021-43883)
exploitblizzard/windowsmdm-lpe-0dayCVE-2021-24084 Windows Local Privilege Escalation Left officially unpatched since 2020. Hence, its still a zero day
sgkdev/page_injectCVE-2026-31431-killed page-cache exploit — code exec into containers sharing the same image layer
flangvik/sharpapplockerC# port of the Get-AppLockerPolicy PS cmdlet
breakfix/sharpscomA C# utility for interacting with SCOM
bbaranoff/cve-2022-0847Exploit for CVE-2022-0847, a Linux kernel privilege escalation vulnerability, providing a proof-of-concept to gain root access.
morrubin/negoexrelayRelays NegoEx/PKU2U Kerberos authentication to arbitrary targets, enabling credentialless authentication, command execution, SMB hash dumping, and…
synacktiv/ica2tcpA SOCKS proxy for Citrix.
wavestone-cdt/defcon-cicd-pipelines-workshopHands-on CI/CD pipeline security workshop with Terraform lab, AWS exploitation, Kubernetes escape, and artifact backdooring exercises for offensive…
xforcered/scmkitSource Code Management Attack Toolkit
rasta-mouse/libtpCrystal Palace library for proxying Nt API calls via the Threadpool
lukegix/cve-2022-2602CVE-2022-2602
olivsec/loboguaraCyber threat intelligence platform for SSL certificate discovery, domain/URL scanning, data leak monitoring, tracking link generation, and threat…
wh04m1001/diagtrackeopWindows privilege-escalation exploit abusing SeImpersonate via DiagTrack RPC, using Secondary Logon to get an INTERACTIVE token and gain SYSTEM.
