TokenMan

Access and Refresh Token Suite. Token Man is a tool for supporting post-exploitation activities using AAD access and/or refresh tokens. Table of Contents Usage Commands Fetch Search Swap FOCI Application Client ID Map AZ OAuth Usage usage: tokenman.py -h fetch,search,swap,az,oauth ... Token Man -...

Havoc

Havoc Havoc is a modern and malleable post-exploitation command and control framework, created by@C5pider. Quick Start Please see the Wiki for complete documentation. Havoc works well on Debian 10/11, Ubuntu 20.04/22.04 and Kali Linux. It's recommended to use the latest versions possible to avoid...

mnemosyne

Mnemosyne is a generic Windows-based memory scraping tool. It scans a process memory space for a search string or regex unicode and ascii then if found, spits these out either to stdout, a file or a socket to a remote listener. The utility is useful for memory scraping a process, as a...

extractTVpasswords

Extract password from TeamViewer memory using Frida CVE-2018-14333 Hi there, in this article we want to tell about our little research about password security in TeamViewer. The method can help during the pentest time for post exploitation to get access to another machine using TeamViewer...

NewPowerDNS

NewPowerDNS NewPowerDNS is an updated version of @domchell's PowerDNS. The main feature added is support for transferring files using DNS A records. See below for a complete list of the modifications made: Support for transfer over DNS A records Gzip compression to reduce file transfer size Suppo...

RingReaper

RingReaper RingReaper is a simple post-exploitation agent for Linux designed for those who need to operate stealthily, minimizing the chances of being detected by EDR solutions. The idea behind this project was to leverage iouring , the new asynchronous I/O interface in the Linux kernel,...

CVE-NetScalerFileSystemCheck

CVE-NetScalerFileSystemCheck This script checks the Citrix Netscaler if it has been compromised by CVE-2019-19781 attacks and collects all file system information. The following files and logs will be checked Latest version 1.13: Template folders for XML files Apache Access logfiles Apache Error...

redis-post-exploitation

redis-post-exploitation For educational purposes only Reference https://2018.zeronights.ru/wp-content/uploads/materials/15-redis-post-exploitation.pdf https://paper.seebug.org/975/ Rogue Server https://github.com/knqyf263/redis-rogue-server Build $ docker-compose build Run $ docker-compose up -d ...

Pentest-Command

项目背景 在渗透测试过程中我们会使用到各类的框架，例如:MSF、CS、Empire、Impacket等，本项目的主要目的是收录在后渗透测试阶段中常用到的命令 基础知识 Windows目录介绍 a、开机启动程序目录c C:\Users\Al1ex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup b、开机自启动程序该特色常被用于进行权限维持c C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup c. System installation path...

offensive-security-adversary-emulation

Project 5 — Offensive Security & Adversary Emulation Part of a 5-project home-lab SOC arc: build → detect & enrich → investigate → monitor & hunt → attack & cross-check. This project adds the missing half of the picture from Projects 1–4: everything before this was blue team building detections,...

CVE-2023-42442

Red Team Offense and Defense: Post-Exploitation Process Sharing for JumpServer Unauthorized Access Vulnerability CVE-2023-42442 Usage: go run CVE-2023-42442.go --url http://192.168.123.120 For details, see the WeChat public account article: https://mp.weixin.qq.com/s/NCSnTsOMxslmf5S6d9896A...

Grafana-Password-Decryptor

Grafana Password Decryptor Python toolkit for decrypting and cracking Grafana passwords from multiple formats. Coded by: strikoder What Does This Tool Do? Handles two types of Grafana password storage: 🔐 AES-256 Base64 datasource table → Decrypt directly with AESDecrypt.py 🔨 PBKDF2HMACSHA256 user...

maalik

Maalik Network Pivoting and Post Exploitation Framework. Features Console Features Desktop notification on new session. Kill Online session easily. Build Maalik Client, Fhdawn easily. Configurable values in settings.ini Root shell. Multithreaded, Get multiple sessions. Maalik is extremenly easy t...

metasploitable-penetration-testing-lab

🔐 Metasploitable 2 Penetration Testing Lab A controlled cybersecurity lab project demonstrating vulnerability discovery, exploitation, post-exploitation validation, and defensive mitigation within an isolated virtual environment. 📌 Project Overview This project simulates a real-world penetration...

Metasploit-Red-Pentest-Lab

Metasploit-Red-Pentest-Lab Lab exercise involving exploitation of the vsftpd 2.3.4 vulnerability CVE-2011-2523 on Metasploitable 2 and post-exploitation steps...

ncentral-compromise-ioc-triage

N-central Compromise IoC Triage Read-only defensive hunting toolkit for post-exploitation artifacts associated with N-able N-central authentication bypass vulnerabilities CVE-2026-18556 and CVE-2026-18577. The PowerShell endpoint scanner flags indicators published by N-able and Huntress; it never...

Network-Filesystem-Forensics

Network and Filesystem Forensics Reports on post-exploitation on honeypot exploiting vulnerable wu-ftpd CVE-2001-0550...

CVE-2017-4490-install-Script-Python-in-Terminal-

CVE-2017-4490-install-Script-Python-in-Terminal- What is the CVE-2017-4490 post-Exploitation, == Come on, my idea Exploit, .bashrc in Use Many of the ideas are harmful 1 install Script Script webdeilvary In Terminal by Use .bashrc 2 Destroy and display horrifying texts In Terminal 3 Subversion an...

loot-me

linux-loot Post Exploit Report Generation. Grabs files / commands and puts them in markdown ready for reporting and assists in finding sensitive information...

BlackMamba

BlackMamba Command and Control What's BlackMamba? Black Mamba is a Command and Control C2 that works with multiple connections at same time. It was developed with Python and with Qt Framework and have multiples features for a post-exploitation step. Some Features Multiple clients. Real-time...