#1Tools for crafting and manipulating low-level code executed after successful exploitation.
Kitploit recommended

Open-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…

CTF framework and exploit development library

Some setup scripts for security research tools.

Adversary Emulation Framework

PS5 exploit chain for firmware 7.00-13.60 combining a WebKit JSC info leak and typedarray corruption with an aio_multi_wait UAF race for kernel…

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell…

Windows memory hacking library

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux

Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell…

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本,最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938…

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

Unified repository for different Metasploit Framework payloads

PEDA - Python Exploit Development Assistance for GDB

Windows kernel driver utility that abuses vulnerable signed drivers (BYOVD) to bypass DSE, load unsigned drivers, hijack protected processes, and…

My experiments in weaponizing Nim (https://nim-lang.org/)