redamon
samugit83/redamonAutonomous AI red team framework that chains reconnaissance, exploitation, and post-exploitation into a single pipeline, then triages findings,…
ai-securityexploit-frameworkslateral-movement+8
3.0k
samugit83/redamonAutonomous AI red team framework that chains reconnaissance, exploitation, and post-exploitation into a single pipeline, then triages findings,…
qyvora/qyvora-toha3eeGo-based network exploitation and MITM framework for authorized penetration testing, network reconnaissance, traffic interception, wireless security…
aniqfakhrul/powerview.pyPowerview on steroids
garrettfoster13/sccmhunterPost-exploitation tool for identifying, profiling, and attacking Microsoft SCCM assets within Active Directory domains, streamlining credential…
specterops/sharphoundCollects Active Directory object metadata, group memberships, sessions, ACLs, and trusts to feed BloodHound attack-path mapping for security…
zyphorixofficialmain-lab/cve-2026-87902Python exploit for CVE-2026-87902, a WordPress Core LFI-to-RCE chain. Fingerprints versions, writes a PHP shell via pearcmd, and provides command…
specterops/nemesisCentralized data enrichment platform for offensive security assessments that ingests, enriches, and enables collaborative analysis of collected files…
specterops/skillsReusable offensive security skills and plugins for AI agents, covering reconnaissance, exploitation, C2, payload development, and reporting across…
darabium/couchdb-exploitExploits CouchDB CVE-2017-12635/12636 for privilege escalation and RCE, then provides an interactive shell with command execution, database browsing,…
bytejmp/ms09-050Python exploit for MS09-050 (CVE-2009-3103) SMBv2 srv2.sys buffer overflow, with vulnerability scanner, arch auto-detection, and x86/x64 reverse…
zales2004/sunset-noontide-pentestingDescription Professional penetration testing assessment of the Sunset: Noontide VulnHub machine, covering reconnaissance, service enumeration,…
wayang1337/cve-2026-80099Newfold plugins (wp-module-data <= 2.9.7) Unauthenticated
login-securite/donpapiAutomated remote credential dumper for Windows environments, extracting DPAPI secrets, browser credentials, certificates, and configuration files…
login-securite/lsassyExtract credentials from lsass remotely
1r0bit/taskhoundTool to enumerate privileged Scheduled Tasks on Remote Systems
wattocyber/custom-oscp-toolingOSCP-focused toolkit for read-only network, SMB, AD, DNS, web, and database enumeration; privesc scanning, hash identification, and…
nxploited/cve-2026-18366Events Manager < 7.4.1 - Unauthenticated Privilege Escalation to Administrator
jvbotelho/ghosthoundGhostHound is a BloodHound OpenGraph extension that surfaces Active Directory tombstone reanimation as a first-class attack path, enumerating deleted…