post-exploitation

ligolo-ng

+21

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

GTFOBins.github.io

+22

GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.

nikaiw/VMkatz

+10

Extract Windows credentials directly from VM memory snapshots and virtual disks

Viper

+15

Adversary simulation and Red teaming platform with AI

fsociety

+14

fsociety Hacking Tools Pack – A Penetration Testing Framework

emp3r0r

+4

Linux-first multi-operator C2 built to stay quiet and keep working. Self-healing mesh with assisted discovery, in-memory execution with encrypted storage, scriptable agents, cross-platform BOFs, SOCKS5 pivoting, and a modular C agent delivered by a sleep-masking stager.

Ne0nd0g/merlin

+2

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.