#1Tools for crafting and manipulating low-level code executed after successful exploitation.
Kitploit recommended
silentisvox/syscallrevenantClean Indirect Syscalls with Syscall Tampering.
mwemuorg/mwemuPure Rust x86 hardware emulator and Windows process simulator for malware analysis, shellcode emulation, and payload unpacking. Supports 32/64-bit PE…
gallopsled/pwntoolsCTF framework and exploit development library
rapid7/metasploit-frameworkOpen-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…
racoten/reflectivepluginloaderReflective PE mapper and evasion-hardened module stomping engine for Windows x64
aethervm/aethervmLLVM-native binary analysis and emulation platform that lifts AArch64 and x86_64 machine code to LLVM IR for instrumentation, deobfuscation, and…
ne0nd0g/merlinMerlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
bishopfox/sliverAdversary Emulation Framework
nullsecuritynet/toolsCurated collection of security tools, exploits, proof-of-concept code, shellcodes, and scripts for penetration testing and educational offensive…
rapid7/metasploit-payloadsUnified repository for different Metasploit Framework payloads
woldann/exoprocCross-process instrumentation for Windows x64 in TypeScript — hook functions, redirect threads, and read/write memory in another process, with no DLL…
dullpurple-sloop726/cve-2026-31431-linux-copy-failExploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.
sk4r4b/ntdll-reconstructionA technique that mixes NTDLL unhooking and hellsgate gate varients
mahmoudimus/static_asmHeader-only C++2x compile-time assembler for x86/x86-64 instruction encoding
codextf2/cobaltstrike_bofloaderopen source port/reimplementation of the Cobalt Strike BOF Loader as is
karkas66/lacuna-rsRust crate for ghost-frame call-stack spoofing, runtime indirect syscalls, and APC injection on Windows x64. Provides SSN resolution, JIT stub…
jm00nj/icmp-ghost-a-fileless-x64-assembly-c2-agentFileless x64 Assembly C2 framework with dual-channel ICMP/DNS protocol pivoting, direct syscall execution, and ptrace-based process injection for…
exploit-database/exploitdbexploitdb // The official Exploit-Database repository
