postexplotation 开源项目推荐（34 个）

uttambodara /TryHackMeRoadmap

A list of 350+ free TryHackMe rooms💻 to kick off your cybersecurity learning, organized by topics for easy exploration and practical skill-building !💀💥

lintstar /SharpHunter

自动化主机信息狩猎工具 - Windows 主机信息自动化狩猎工具

Leo4j /Amnesiac

Amnesiac is a post-exploitation framework entirely written in PowerShell and designed to assist with lateral movement within Active Directory environments

Leo4j /Invoke-SMBRemoting

Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement

voukatas /Commander

A command and control (C2) server

Geeoon /asploit

One line command and control backdoors for APIs and web applications.

secxena /credcheck

Credentials Checking Framework

Mahmoud7Osman /VSS

Linux-Based Reverse Shell Builder For Linux Penetration Testers

VoidSec /SolarPuttyDecrypt

A post-exploitation tool to decrypt SolarPutty's sessions files

NoF0rte /slack-slurp

Pentesting post exploitation tool for slack

icebearfriend /Quickrundown

Smart overlay for Cobalt Strike PS function

1xPwn /CVE-2025-32463

This CVE addresses a vulnerability in sudo versions 1.9.14 to 1.9.17, enabling unauthorized local privilege escalation to root access.

carlospolop /KAOSK-backdoors

Automate the creation of Backdoors and postexplotation activities

grisuno /beacon

Experimental Lightweight Windows pure C Beacon CodeName: BlackBasalt for LazyOwn RedTeam Framework C2

b3d3c /BDsploit

BDsploit (Big Data Exploitation and Post-exploitation Toolkit)

Gwalrock /hacking-utilidades

Utilidades para facilitarnos el trabajo

HackScaleTeam /DefenderDropper

Advanced DLL Hijacking Payload Generator Using Windows Defender Vulnerabilities

Altoid0 /Gom-Jabbar

Personal collection of Red team scripts

exfil0 /CVE-2025-53770

A sophisticated, wizard-driven Python exploit tool targeting CVE-2025-53770, a critical (CVSS 9.8) unauthenticated remote code execution (RCE) vulnerability in on-premises Microsoft SharePoint Server (2016, 2019, Subscription Edition)

iinsertNameHere /Pilotica

A Postexploitation HTTP C2 Framework