#1Adversary simulation, red team infrastructure, C2 frameworks, and operational security tools.
Kitploit recommended
the-xentropy/xencryptA PowerShell script anti-virus evasion tool
danmcinerney/icebreakerGets plaintext Active Directory credentials if you're on the internal network but outside the AD environment
r00t-3xp10it/fakeimageexploiterUse a Fake image.jpg to exploit targets (hide known file extensions)
med0x2e/sigflipSigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.
owerdogan/whoami-projectWhoami provides enhanced privacy, anonymity for Debian and Arch based linux distributions
dronesploit/dronesploitMetasploit-style console framework for pentesting commercial drones, featuring modular exploits for wireless attacks, SSID/password manipulation, and…
ne0nd0g/go-shellcodeA repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques.
forbiddenprogrammer/conti-pentester-guide-leakLeaked pentesting manuals given to Conti ransomware crooks
blackarrowsec/redteam-researchCollection of PoC and offensive techniques used by the BlackArrow Red Team
yuanyuanxiang/simpleremoterA remote control program based on Gh0st: 实现了终端管理、进程管理、窗口管理、远程桌面、文件管理、语音管理、视频管理、服务管理、注册表管理等功能，优化全部代码及整理排版，修复内存泄漏缺陷，程序运行稳定。项目代码仅限于学习和交流用途。
assetnote/nowafplsBurp Plugin to Bypass WAFs through the insertion of Junk Data
viralmaniar/i-see-youISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location…
uber-common/mettaAn information security preparedness tool to do adversarial simulation.
joelgmsec/evilnovncReal-time phishing platform that bypasses 2FA via a live noVNC browser session, capturing cookies, saved passwords, browsing history, and downloaded…
s0ld13rr/pentestcodeAutonomous AI penetration testing agent that orchestrates multi-agent recon, exploitation, post-exploitation, and reporting with persistent…
redbyte1337/graphspyInitial Access and Post-Exploitation Tool for Entra ID and M365 with a browser-based GUI
icex0/wp2shell-pocwp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain
syslifters/offsec-reportingOffensive Security OSCP+, OSEP, OSWP, OSWA, OSWE, OSED, OSMR, OSEE, OSDA, OSIR, OSTH Exam and Lab Reporting / Note-Taking Tool
