Decepticon
bittersecurity/decepticonAutonomous LLM red team agent that plans and executes full attack chains—recon, exploitation, privilege escalation, lateral movement and C2—inside an…
ai-securitycommand-and-controlexploitation+9
6.5k
bittersecurity/decepticonAutonomous LLM red team agent that plans and executes full attack chains—recon, exploitation, privilege escalation, lateral movement and C2—inside an…
stillbigjosh/kube-reaperScans Kubernetes clusters from any identity, flags dangerous permissions, and chains them into multi-step escalation paths to cluster compromise.
wattocyber/offensive-one-liners110 offensive-security one-liners for authorized testing and CTFs, grouped by category and kill-chain step.
bc-security/empireEmpire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
wavestone-cdt/defcon-cicd-pipelines-workshopHands-on CI/CD pipeline security workshop with Terraform lab, AWS exploitation, Kubernetes escape, and artifact backdooring exercises for offensive…
dirkjanm/bloodhound.pyA Python based ingestor for BloodHound
mayyhem/maestroAbusing Azure services over C2
nccgroup/kubetcdPost-exploit a compromised etcd, gain persistence and remote shell to nodes.
mythicagents/medusaCross-platform C2 agent for Mythic with dynamic function loading, SOCKS5 proxy, file operations, shellcode injection, and macOS/Windows…
cobbr/eliteElite is the client-side component of the Covenant project. Covenant is a .NET command and control framework that aims to highlight the attack…
hann1bl3l3ct3r/fuxapwnPOC exploit for CVE-2026-25895 FUXA Unauthenticated Path Traversal -> Arbitrary File Write -> RCE
thekevinday/docker_lightman_exploitDocker CVE-2022-37708
kouf320/docker-lab-cve-2017-5638-cve-2021-41773Docker-based multi-stage attack emulation lab demonstrating CVE-2017-5638 and CVE-2021-41773 exploitation, lateral movement, and Suricata IDS…
cyberw1ng/cve-2025-33053-pocPOC for CVE-2025-33053 WebDav Exploit, demonstrating how the vulnerability can be triggered in a real environment. This repository focuses on…
samugit83/redamonAutonomous AI red team framework that chains reconnaissance, exploitation, and post-exploitation into a single pipeline, then triages findings,…
tdwyer/cve-2020-8559This is a PoC exploit for CVE-2020-8559 Kubernetes Vulnerability
jacobtaylor3/c2-and-post-exploitation-frameworkCVE-2021-21220 Exploitation infrastructure
jvbotelho/ghosthoundGhostHound is a BloodHound OpenGraph extension that surfaces Active Directory tombstone reanimation as a first-class attack path, enumerating deleted…