windows-post-exploitation

Windows post-exploitation tools, resources, techniques and commands to use during post-exploitation phase of penetration test. Contributions are appreciated. Enjoy!

windows-rce-exploits

The exploit samples database is a repository for **RCE** (remote code execution) exploits and Proof-of-Concepts for **WINDOWS**, the samples are uploaded for education purposes for red and blue teams.

windows10_ntfs_crash_dos

PoC for a NTFS crash that I discovered, in various Windows versions

windowsexploits

Windows exploits, mostly precompiled. Not being updated. Check https://github.com/SecWiki/windows-kernel-exploits instead.

winpayloads

Undetectable Windows Payload Generation

winpwn

Automation for internal Windows Penetrationtest / AD-Security

winpwnage

UAC bypass, Elevate, Persistence methods

winspect

Powershell-based Windows Security Auditing Toolbox

wiretap

.NET 4.0 Project to interact with video, audio and keyboard hardware.

witnessme

Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.

wmicmd

A command shell wrapper using only WMI for Microsoft Windows

wmihacker

A Bypass Anti-virus Software Lateral Movement Command Execution Tool

wmimplant

This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is translated into a WMI-equivalent for use on a network/remote machine. WMImplant is WMI based.

wordpress-detector

Wordpress Detector

wordpress-easy-wp-smtp-plugin-0day

wordpress-exploit-framework

A Ruby framework designed to aid in the penetration testing of WordPress systems.

wordpresscan

WPScan rewritten in Python + some WPSeku ideas

wordpressmassexploiter

[discontinued] Mass exploiter of CVE-2015-1579 for WordPress CMS

wordsmith

The aim of Wordsmith is to assist with creating tailored wordlists. This is mostly based on geolocation.

wp-3u3

wp-checkout-exploit

Wordpress Plugin "WP Checkout" Mass exploit

wp-content-injection-mass-exploit

wp content injection mass exploit Perl Script

wp-user-enum-scripts

Some wordpress user enumeration scripts.

wp_auto_upshell

Wordpress Auto Upload Shell

wpexploit

WordPress auto exploit

wpforce

Wordpress Attack Suite

wpscan

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites.

wpsploit

WPSploit - Exploiting Wordpress With Metasploit

wsc2

A WebSocket C2 Tool

wsman-winrm

A collection of proof-of-concept source code and scripts for executing remote commands over WinRM using the WSMan.Automation COM object