Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
postEX — Windows post-exploitation reconnaissance agent that collects system info, privileges, patches, defenses, network config, credentials, and persistence mechanisms, outputting structured JSON reports with optional AI-driven attack path analysis. | Kitploit
Tools/GitHubGitHub/niker-lixy/postex
Privilege EscalationReconnaissancePersistence MechanismsInformation GatheringPost-ExploitationPenetration TestingRed Teaming
GitHubniker-lixy/postex

postEX

Windows post-exploitation reconnaissance agent that collects system info, privileges, patches, defenses, network config, credentials, and persistence mechanisms, outputting structured JSON reports with optional AI-driven attack path analysis.

View Repository
142 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

PostEX - Post-Exploitation Recon Agent

License: MIT Python 3.10+ Platform: Windows

For authorized security testing only. Unauthorized use is illegal.

PostEX is a Python-based post-exploitation reconnaissance agent for Windows. It collects system information, privilege status, installed patches, defense mechanisms, network configuration, credentials, and persistence mechanisms — then generates a structured JSON report.

Optionally, PostEX can send the report to an LLM via OpenRouter API for automatic Red Team (attack paths) or Blue Team (defense audit) analysis.

Features

System Recon

  • Hostname, OS version, build, architecture, CPU
  • Current user, Integrity Level (SID-based), admin status
  • UAC status, full privilege list

Patch Enumeration

  • Installed KB updates from registry
  • CVE mapping: CVE-2020-0796 (JuicyPotato), CVE-2021-34527 (PrintSpoofer), CVE-2020-1472 (Zerologon)

Defense Enumeration

  • Windows Defender status and exclusions (Paths, Processes, Extensions)
  • Third-party AV/EDR detection (60+ products: Kaspersky, CrowdStrike, SentinelOne, Carbon Black, etc.)
  • Windows Firewall status (Domain, Private, Public profiles)
  • AppLocker configuration

Network Recon

  • Network interfaces (IP, netmask, MAC)
  • ARP table (neighbors)
  • Open ports and listening processes (TCP/UDP, PID, process name)
  • DNS cache
  • WiFi profiles and passwords
  • SMB shares

Credential Access

  • LSASS process detection (PID)
  • Saved Windows credentials (cmdkey)
  • SAM/SYSTEM hive dump attempt
  • Browser password databases (Chrome, Edge, Firefox)
  • Autologin registry check (DefaultPassword)
  • RDP session history
  • PowerShell command history

Persistence

  • Registry autorun entries (HKLM + HKCU)
  • Scheduled tasks (TaskName, Task To Run, Run As User, Schedule, Status)
  • Windows services (binary path, start type, writable check)
  • Writable system folders
  • Writable service binaries

AI Analysis (via OpenRouter)

  • Red Team mode: Attack paths, privilege escalation vectors, credential access, lateral movement, defense evasion, recommended tools and commands.
  • Blue Team mode: Critical vulnerabilities, defense gaps, credential hygiene, network exposure, persistence risks, prioritized fixes.

Installation

root@kitploit:~
git clone https://github.com/Niker-lixy/postEX.git
cd postEX
pip install -r requirements.txt
Download Tool