Exploits Scripts and other tools that are useful during Penetration-Testing or Red Team engagement
☆74Apr 10, 2022Updated 4 years ago
Alternatives and similar repositories for PT-ToolKit
Users that are interested in PT-ToolKit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Cobalt Strike Malleable Profile Inline Patch Template: A Position Independent Code (PIC) Code Template For Creating Shellcode That Can Be…☆43Sep 3, 2020Updated 6 years ago
- Bash Script to automate the process of setting up a new Kali Linux virtual machine to look a like HTB PwnBox☆22Aug 11, 2022Updated 4 years ago
- havoc2nginx is a simple python script that converts Havoc Framework's yaotl malleable c2 profile to Nginx configuration file format. Most…☆12May 8, 2023Updated 3 years ago
- yet another AV killer tool using BYOVD☆317Dec 12, 2023Updated 2 years ago
- Windows AppLocker Driver (appid.sys) LPE☆81Jul 29, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- The Hall of Ancient Exploitation Tools☆16Oct 14, 2019Updated 7 years ago
- A custom run space to bypass AMSI and Constrained Language mode in PowerShell.☆20May 17, 2023Updated 3 years ago
- Using PowerShell to quickly scan through the SYSVOL share for exposed credentials within auto logon policies.☆14Nov 30, 2022Updated 3 years ago
- early cascade injection PoC based on Outflanks blog post, in rust☆64Nov 8, 2024Updated last year
- PE Sections Packer + Loader for Windows - Packs a DLL/EXE file and maps it into the loader (C/C++)☆16Oct 19, 2025Updated last year
- Arbitrary Function Call Exploit using the ThrottleStop driver☆11Feb 25, 2026Updated 8 months ago
- ☆40Jun 23, 2024Updated 2 years ago
- Shellcode loader☆103Nov 24, 2024Updated last year
- some research on EDR deconditioning☆16Jun 4, 2026Updated 4 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A simple BOF (Beacon Object File) to search files in the system☆20Dec 2, 2023Updated 2 years ago
- About C# loader that copies a chunk at the time of the shellcode in memory in a suspended process, rather that all at once☆12Jul 14, 2022Updated 4 years ago
- ☆15Aug 17, 2023Updated 3 years ago
- Evasion kit for Cobalt Strike☆30Jan 16, 2026Updated 9 months ago
- Combining 3 techniques (Threadless Injection + DLL Stomping + Caro-Kann) together to evade MDE.☆80Dec 23, 2023Updated 2 years ago
- Another AMSI bypass - but in C++.☆23May 22, 2023Updated 3 years ago
- BOF for C2 framework☆45Nov 9, 2024Updated last year
- 🗡️ A multi-user malleable C2 framework targeting Windows. Written in C++ and Python☆46Feb 6, 2026Updated 8 months ago
- C# Data Collector for BloodHound with CobaltStrike integration (BOF.NET)☆61Apr 13, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Cobalt Strike User-Defined Reflective Loader with AV/EDR Evasion in mind☆496Jul 12, 2023Updated 3 years ago
- Dynamically resolve API function addresses at runtime in a secure manner.☆75Nov 11, 2025Updated 11 months ago
- Modules used by the Havoc Framework☆272Jun 17, 2024Updated 2 years ago
- Windows Service with the implementation of the Process hollowing technique to run shellcode☆13Jul 20, 2023Updated 3 years ago
- DLL Hijacking and Mock directories technique to bypass Windows UAC security feature and getting high-level privileged reverse shell. Secu…☆44May 18, 2024Updated 2 years ago
- Advanced OPSEC fork of Donut. Features a Custom in-memory CLR Host, Tail-Jump ETW bypasses, and zero-patch AMSI evasion for stealthy shel…☆77Jun 24, 2026Updated 4 months ago
- Remote PE reflective injection with a simple reflective loader☆32Jun 28, 2019Updated 7 years ago
- Cobalt Strike Beacon Object File (BOF) that obtain SYSTEM privilege with SeImpersonate privilege by passing a malicious IUnknwon object t…☆12Feb 4, 2024Updated 2 years ago
- this script adds the ability to encode shellcode (.bin) in XOR,chacha20, AES. You can choose between 2 loaders (Myph / 221b)☆83Dec 20, 2023Updated 2 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- RunPE implementation with multiple evasive techniques (2)☆14Sep 25, 2025Updated last year
- Purple Team Dropper generator using open source templates.☆18May 23, 2024Updated 2 years ago
- Nim-based assembly packer and shellcode loader for opsec & profit☆486Feb 24, 2023Updated 3 years ago
- This project was for my senior capstone at the University of Arizona. I wanted to create a payload that would potentially bypass AV / EDR…☆14Nov 14, 2023Updated 2 years ago
- Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique☆78Sep 29, 2022Updated 4 years ago
- Here you can find some vulnerable Windows Kernel Drivers☆14Feb 21, 2025Updated last year
- CIA UAC bypass implementation that utilizes elevated COM object to write to System32 and an auto-elevated process to execute as administr…☆15Dec 30, 2023Updated 2 years ago