A list of 350+ free TryHackMe rooms💻 to kick off your cybersecurity learning, organized by topics for easy exploration and practical skill-building !💀💥

windows web networking reverse-engineering active-directory forensics ctf malware-analysis endpoint andorid burpsuite liunx cyrptography postexplotation wifihacking tryhackme digitalforensics forensics-tools

• Updated Oct 23, 2026

Automated Hosting Information Hunting Tool - Windows 主机信息自动化狩猎工具

cobalt-strike bof postexplotation redteam-tools execute-assembly

• Updated Apr 15, 2025
• C#

Amnesiac is a post-exploitation framework entirely written in PowerShell and designed to assist with lateral movement within Active Directory environments

pentesting-windows pentesting post-exploitation pentest red-team pentest-scripts c2 pentest-tool redteaming command-and-control redteam red-teaming pentest-tools pentesting-tools postexplotation redteam-infrastructure commandandcontrol red-team-tools red-teaming-tools

• Updated Oct 1, 2025
• PowerShell

Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement

shell named-pipes command-execution pentesting-tools postexplotation fileless lateral-movement

• Updated Nov 11, 2026
• PowerShell

A command and control (C2) server

open-source hacking cybersecurity penetration-testing pentesting pentest offensive-security c2 redteaming redteam pentesting-tools postexplotation commandandcontrol redteam-tools

• Updated Jul 5, 2024
• Python

One line command and control backdoors for APIs and web applications.

backdoor c2 redteam postexplotation commandandcontrol

• Updated Apr 9, 2024
• Python

Credentials Checking Framework

framework python3 bug-bounty pentesting bugbounty python2 bugcrowd pentest-scripts hackerone pentest-tool postexplotation postexploit

• Updated Feb 8, 2023
• Python

Linux-Based Reverse Shell Builder For Linux Penetration Testers

c linux reverse-shell virus cpp malware shell-script postexplotation

• Updated Nov 12, 2021
• C

A post-exploitation tool to decrypt SolarPutty's sessions files

exploit forensics sessions decrypt postexplotation postexploit solarputty

• Updated Dec 8, 2022
• C#

Pentesting post exploitation tool for slack

go slack golang pentesting pentest-tool postexplotation

• Updated Aug 19, 2026
• TypeScript

Smart overlay for Cobalt Strike PS function

aggressor-scripts redteam postexplotation cobaltstrike

• Updated Mar 9, 2019

This CVE addresses a vulnerability in sudo versions 1.9.14 to 1.9.17, enabling unauthorized local privilege escalation to root access.

linux exploit sudo privilege-escalation lpe postexplotation cve-2025-32463

• Updated Aug 12, 2026
• Go

Automate the creation of Backdoors and postexplotation activities

listener attacker unicorn msfvenom backdoors metasploit backdoors-created metasploit-payloads postexplotation

• Updated Jun 20, 2022
• Python

Experimental Lightweight Windows pure C Beacon CodeName: BlackBasalt for LazyOwn RedTeam Framework C2

c windows beacon c2 adversary-emulation postexplotation

• Updated Nov 10, 2026
• HTML

BDsploit (Big Data Exploitation and Post-exploitation Toolkit)

shodan big-data apt cluster marathon python3 trojan dcos mesosphere exploitation command-and-control trojan-rat postexplotation

• Updated Jan 25, 2024
• Python

Utilidades para facilitarnos el trabajo

python bash ssh nmap exploits poc browser-extension keylogger redteaming hacking-tools postexplotation malduinow

• Updated Sep 11, 2024
• Python

Personal collection of Red team scripts

powershell persistence powershell-scripts offensive-security redteaming redteam postexplotation offensive-scripts redteam-tools initial-access

• Updated Mar 27, 2025
• PowerShell

A sophisticated, wizard-driven Python exploit tool targeting CVE-2025-53770, a critical (CVSS 9.8) unauthenticated remote code execution (RCE) vulnerability in on-premises Microsoft SharePoint Server (2016, 2019, Subscription Edition)

python attack exploit poc sharepoint postexplotation cve-2025-53770

• Updated Jul 23, 2025
• Python

Advanced DLL Hijacking Payload Generator Using Windows Defender Vulnerabilities

dll-hijacking postexplotation windowsdefenderbypass

• Updated Jan 7, 2026
• Python

A Postexploitation HTTP C2 Framework

framework c2 postexplotation

• Updated Dec 12, 2025
• Python