#1Adversary simulation, red team infrastructure, C2 frameworks, and operational security tools.
Kitploit recommended
jakehildreth/locksmith2An AD CS toolkit for AD Admins, Defensive Security Professionals, and Filthy Red Teamers
dagowda/confluencec2This is a project aimed to make every other Saas product a C2, confluence is just the beginning.
tencent-hunyuan/diagsafeDiagnostic LLM safety benchmark with 3,489 bilingual prompts, an 84-label taxonomy, and prompt-level rubric judging for explainable, fine-grained…
prepouce/coercedpotatoWindows local privilege escalation tool that abuses SeImpersonatePrivilege via MS-RPRN and MS-EFSR RPC coercion to execute commands as SYSTEM.
trhhubsd/artexMulti-agent LLM system for autonomous penetration testing in isolated labs: planner/worker agents share asset and exploration graphs, with MITM…
peach-research-lab/authorizationbenchThe first benchmark to evaluate how well do LLM agents act in alignment with their assigned authorization scope.
horizon3ai/cve-2026-106173Python proof-of-concept exploit for CVE-2026-106173, an unauthenticated gRPC path traversal file write in Fortinet FortiSIEM that enables blind…
curiotrace/paramtraceFast HTTP parameter discovery for authorized security testing
phantom-brigade1/wifistingGTK4 and CLI wireless security toolkit with 57 standalone modules for Wi-Fi, Bluetooth, 802.15.4, SDR/RF, NFC and router-side or network MITM testing…
constantinefedorov/review.cve-2021-3156Python proof-of-concept exploit for CVE-2021-3156 (Baron Samedit), a sudoedit heap overflow enabling local privilege escalation to root on vulnerable…
blendin/3snakeTool for extracting information from newly spawned processes
capture0x/aws-pentestAutomated AWS security assessment CLI with 30 modules covering IAM privilege escalation, S3 exposure, compute, network, logging and misconfiguration…
ahmadhassan-bted/silentsnifferA professional, high-fidelity de-anonymization and vulnerability diagnostic framework. Features a zero-coupling modular architecture for…
silentisvox/syscallrevenantClean Indirect Syscalls with Syscall Tampering.
abraxas/openmeetings-soap-otp-skipApache OpenMeetings 9.1.0 - High - Remote - 2FA skip - SOAP/REST password login skips TOTP
kamalx06/tornadoc2Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, ECDSA-signed tasking, and a multi-operator team server with…
abraxas/pfsense-assign-if-addpfSense CE 2.9.0-DEVELOPMENT - High - Remote - RCE - assign Add if_add
abraxas/pfsense-config-readonly-restorepfSense CE 2.9.0-DEVELOPMENT - High - Remote - Privilege leftover - readonly config_install
