RemoteRecon

RemoteRecon Remote Recon and Collection RemoteRecon provides the ability to execute post-exploitation capabilities against a remote host, without having to expose your complete toolkit/agent. Often times as operator's we need to compromise a host, just so we can keylog or screenshot or some other...

Mythic

Mythic A cross-platform, post-exploit, red teaming framework built with GoLang, docker, docker-compose, and a web browser UI. It's designed to provide a collaborative and user friendly interface for operators, managers, and reporting throughout red teaming. Check out a series of YouTube videos...

CVE-2022-31301

CVE-2022-31301 Haraj Script 3.7 - Post Ads Authenticated Stored XSS Exploit Title: Haraj Script 3.7 - Authenticated Stored XSS Date: 2022-06-13 CVE: CVE-2022-31301 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://angtech.org/ Software Link: https://angtech.org/product/view/3 Versio...

shennina

Shennina AI के साथ होस्ट शोषण को स्वचालित करना सारांश शेनिना एक स्वचालित होस्ट शोषण ढाँचा है। परियोजना का मिशन कृत्रिम बुद्धिमत्ता का उपयोग करके स्कैनिंग, भेद्यता स्कैनिंग/विश्लेषण और शोषण को पूरी तरह से स्वचालित करना है। शेनिना हमलों को करने के लिए मेटास्प्लॉइट और एनमैप के साथ एकीकृत है, साथ ही...

shennina

Shennina Automating Host Exploitation with AI Abstract Shennina is an automated host exploitation framework. The mission of the project is to fully automate the scanning, vulnerability scanning/analysis, and exploitation using Artificial Intelligence. Shennina is integrated with Metasploit and Nm...

Neo

The Neo C2 Framework एक मॉड्यूलर सर्वर-क्लाइंट आर्किटेक्चर पोस्ट-एक्सप्लॉइटेशन फ्रेमवर्क जो रेड टीम ऑपरेशन्स और सुरक्षा परीक्षण में सहयोगी एजेंट प्रबंधन के लिए बनाया गया है। ऑपरेटरों को अपने स्वयं के एक्सटेंशन मॉड्यूल जोड़ने की अनुमति देकर लचीलापन सक्षम करता है स्थापना • एजेंट और स्टेजर • प्रोफ़ा...

StandIn

StandIn StandIn is a small AD post-compromise toolkit. StandIn came about because recently at xforcered we needed a .NET native solution to perform resource based constrained delegation. However, StandIn quickly ballooned to include a number of comfort features. I want to continue developing...

emp3r0r

emp3r0r A self-healing, memory-only C2 for Linux and Windows — agents that survive broken links, never touch disk, and script their way through the Win32 API. What is emp3r0r?...

iPwn

iPwn A Framework meant for the exploitation of iOS devices. REMEMBER: THE IPHONE YOU ARE ATTEMPTING TO GET INTO USING THIS TOOL MUST BE JAILBROKEN Status - ❌ This project is still being worked on. I'm adding more extensions and options for post-exploitation for harvesting Device information and...

zuthaka

A collaborative free open-source Command & Control integration framework that allows developers to concentrate on the core function and goal of their C2. Explore the docs » · Report Bug · Request Feature · Table of Contents 1. About The Project Problem statement Solution Built With 2. Already...

DSSS

Damn Small SQLi Scanner Damn Small SQLi Scanner DSSS is a fully functional SQL injection vulnerability scanner supporting GET and POST parameters written in under 100 lines of code. As of optional settings it supports HTTP proxy together with HTTP header values User-Agent, Referer and Cookie...

sqlwinds

SQLWinds SQL सुरक्षा मूल्यांकन और पोस्ट-एक्सप्लॉइटेशन टूलकिट SQLWinds Microsoft SQL Server के सुरक्षा परीक्षण और शोषण के लिए एक कमांड-लाइन टूल है। यह एक इंटरैक्टिव वातावरण प्रदान करता है जिससे सर्वरों का गहन विश्लेषण, विशेषाधिकार वृद्धि, हमले निष्पादित करना, और नेटवर्क में पिवट करना संभव होता है ...

CVE-2025-5287

CVE-2025-5287 PoC Unauthenticated SQL Injection exploit for WordPress Likes and Dislikes Plugin ≤ 1.0.0 📖 Description This Python script is a proof-of-concept PoC exploit for CVE-2025-5287 , targeting a vulnerability in the WordPress Likes and Dislikes Plugin ≤ 1.0.0. The vulnerability allows...

PanOsExploitMultitool

PanOsExploitMultitool Exploitation and Post-Exploitation Multitool for Palo Alto PAN-OS Systems affected by vulnerabilities CVE-2024-0012 and CVE-2024-9474 During early exploitation of CVE-2024-0012 and CVE-2024-9474's Remote Code Execution vulnerabilities, I acquired a shell and began identifyin...

ci_fuzz

Description: root@kitploit: This script fuzz's for Command Injection vulnerabilities resulting in remote command execution. Similiar OWASP vulnerablities are explained here -- https://www.owasp.org/index.php/CommandInjection The script will attempt to execute OS commands by injecting into every...

CVE-2025-68722

CVE-2025-68722: Axigen WebAdmin CSRF भेद्यता सारांश Axigen WebAdmin इंटरफ़ेस में महत्वपूर्ण स्थिति-परिवर्तन करने वाली क्रियाएं GET अनुरोधों के माध्यम से सुलभ हैं। जबकि h टोकन प्रत्यक्ष CSRF से बचाता है, एप्लिकेशन उपयोगकर्ता के प्रमाणीकरण के तुरंत बाद s ब्रेडक्रंब पैरामीटर के माध्यम से कतारबद्ध...

AdbNet

adb - An exploitation tool for android devices. A tool that allows you to search for vulnerable android devices across the world and exploit them. Features root@kitploit: Features: - Post-Exploitation modules to control and tinker with the device you are connected to. - Scanners to search for...

Apollo

Apollo أداة وصول عن بُعد بسيطة وخفيفة مكتوبة بلغة Python Apollo هي أداة وصول عن بُعد متعددة المنصات Windows, Linux, FreeBSD وMacOS مخصصة للغة Python 3.4+. ميزاتها حاليًا أساسية جدًا، لكنها تتيح تنفيذ الأوامر عن بُعد بعد الاستغلال post-exploitation، بالإضافة إلى الحصول على معلومات حول نظام العميل...

CVE-2025-66024

CVE-2025-66024: XWiki Blog Application home page vulnerable to Stored XSS via Post Title Overview...

RootHelper

RootHelper Roothelper will aid in the process of privilege escalation on a Linux system that has been compromised. The latest version totals eleven scripts. From enumeration to exploit suggestion to exploit deployment. RootHelper ensures you have access to the best tools for the job. The credits...