#1Tools for gaining higher-level permissions or unauthorized access on compromised systems.
Kitploit recommended
flangvik/sharpcollectionNightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps…
theori-io/copy-fail-cve-2026-31431Exploits a 9-year-old Linux kernel local privilege escalation (CVE-2026-31431); provides tested exploit logic for Ubuntu, Amazon Linux, RHEL, and…
malwaredllc/byobAn open-source post-exploitation framework for students, researchers and developers.
hfiref0x/uacmeDefeating Windows User Account Control
gtworek/psbitsSimple (relatively) things allowing you to dig a bit deeper than usual.
infosecn1nja/ad-attack-defenseAttack and defend active directory using modern post exploitation adversary tradecraft activity
ghostpack/seatbeltSeatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security…
adaptix-framework/adaptixc2AdaptixC2 is a highly modular advanced redteam toolkit
guardicore/monkeyInfection Monkey - An open-source adversary emulation platform
itm4n/privesccheckPrivilege Escalation Enumeration Script for Windows
specterops/bloodhoundSix Degrees of Domain Admin
samugit83/redamonAutonomous AI red team framework that chains reconnaissance, exploitation, and post-exploitation into a single pipeline, then triages findings,…
ghostpack/certifyC# tool for enumerating and exploiting misconfigurations in Active Directory Certificate Services (AD CS), enabling certificate template abuse,…
ignitetechnologies/privilege-escalationThis cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.
six2dez/pentest-bookCurated penetration testing wiki with daily-updated techniques, scripts, and checklists for reconnaissance, web, cloud, mobile, and…
0x4d31/awesome-oscpA curated list of awesome OSCP resources
liamg/traitor:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w…
yukonga/ghostlock-appGhostLock One-Tap Execution App (CVE-2026-43499)
