#1Tools for gaining higher-level permissions or unauthorized access on compromised systems.
Kitploit recommended
hfiref0x/kduWindows kernel driver utility that abuses vulnerable signed drivers (BYOVD) to bypass DSE, load unsigned drivers, hijack protected processes, and…
t3l3machus/hoaxshellA Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.
m0nad/diamorphineLKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)
rhinosecuritylabs/pacuThe AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
matheuzsecurity/singularityStealthy Linux kernel rootkit (LKM) for 6.x kernels with advanced process/network hiding, privilege escalation, and comprehensive evasion of eBPF…
ghostpack/rubeusTrying to tame the three-headed dog.
fuzzysecurity/powershell-suiteMy musings with PowerShell
cdk-team/cdk📦 Make security testing of K8s, Docker, and Containerd easier.
k8gege/ladonLadon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。网络资产探测32…
ly4k/certipyTool for Active Directory Certificate Services enumeration and abuse
netspi/microburstA collection of scripts for assessing Microsoft Azure security
netspi/powerupsqlPowerUpSQL: A PowerShell Toolkit for Attacking SQL Server
byt3bl33d3r/offensivenimMy experiments in weaponizing Nim (https://nim-lang.org/)
voorivex/pentest-guidePenetration tests guide based on OWASP including test cases, resources and examples.
marten4n6/evilosxAn evil RAT (Remote Administration Tool) for macOS / OS X.
dominicbreuker/pspyMonitor linux processes without root permissions
r4j0x00/exploitsProof-of-concept exploit collection targeting Linux kernel LPE, sudo heap overflow, and Chrome V8 OOB write vulnerabilities for penetration testing.
integration-it/active-directory-exploitation-cheat-sheetA cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
