bash1 min read
Automated privesc enumeration: LinPEAS, WinPEAS, JAWS
Enumeration scripts for post-exploitation to quickly identify potential privilege escalation vectors.
- #linpeas
- #winpeas
- #jaws
- +2
Cybersecurity · Tools
Exploitation and Post-Exploitation Frameworks
Metasploit-like tools for running exploits, generating payloads, and working a session.
10 snippets
msfconsole1 min read
db_autopwn: automatic exploit matching in Metasploit
Match every open port already stored in the MSF database against known exploit modules automatically.
- #metasploit
- #db_autopwn
- #vulnerability-scanning
bash1 min read
GoPhish: phishing campaign framework
Open-source platform for running, tracking and reporting on simulated phishing campaigns.
- #gophish
- #social-engineering
- #phishing
bash1 min read
Kernel exploit suggesters: WES-NG, Windows Exploit Suggester, Linux Exploit Suggester
Compare a target's patch level/kernel version against known CVEs to shortlist privesc exploits.
- #privesc
- #windows-exploit-suggester
- #linux-exploit-suggester
- +1
msfconsole1 min read
Metasploit Framework: console, database & workflow basics
Core msfconsole commands, database setup, workspaces, and resource scripts.
- #metasploit
- #msfconsole
msfconsole1 min read
Meterpreter essentials
The in-memory Metasploit payload/shell — core commands for a session once you've landed one.
- #metasploit
- #meterpreter
- #post-exploitation
bash2 min read
msfvenom: generating & encoding payloads
Build standalone meterpreter payloads, encode them for AV evasion then inject them into legitimate executables.
- #metasploit
- #msfvenom
- #payloads
bash1 min read
PowerShell Empire: post-exploitation C2 framework
PowerShell-native agents with encrypted comms and modules ranging from keylogging to Mimikatz.
- #powershell-empire
- #post-exploitation
- #windows
bash1 min read
searchsploit: offline exploit-db search
Search the local exploit-db mirror for public exploits matching a service and version.
- #searchsploit
- #exploit-db
bash1 min read
UACMe: bypassing Windows UAC
Open-source collection of known UAC auto-elevate abuse techniques, covering Windows 7 through 10.
- #uacme
- #uac-bypass
- #windows
- +1
Nothing matches these filters.