Topics / #post-exploitation

Post-exploitation projects on GitHub

Security resources covering actions after initial system compromise.

As of October 17, 2026, the most-starred Post-exploitation projects on GitHub are mimikatz (21.9K stars), hacker-roadmap (15.7K stars) and GTFOBins.github.io (13.8K stars). GitHub.Locker tracks 8 Post-exploitation repositories with 106.9K stars combined. The fastest-growing on October 16 was Claude-Red, with +21 stars in a day.

8Projects

106.9KStars in total

+38Stars in a day

Browse in the catalog →github.com/topics/post-exploitation ↗

Hot right now

Most stars gained in a day · Oct 16

+21

Claude-Red

SnailSploit/Claude-Red · ★ 7.6K

claude-red is a curated library of offensive security skills for the Claude Skills system: structured SKILL.md files that prime Claude with expert-level methodology for one attack surface each, from SQLi to shellcode.

TheFatRat

screetsec/TheFatRat · ★ 11.5K

TheFatRat is an exploiting tool that compiles malware from famous payloads — an easy way to generate backdoors built to slip past most anti-virus software.

GTFOBins.github.io

GTFOBins/GTFOBins.github.io · ★ 13.8K

GTFOBins is a curated list of Unix-like executables that can be abused to bypass local security restrictions in misconfigured systems — for example, binaries a restricted user can turn into a root shell.

hacker-roadmap

sundowndev/hacker-roadmap · ★ 15.7K

This is a curated roadmap and toolkit index for learning and practicing ethical hacking: it explains what penetration testing is and groups hundreds of security tools, wordlists and references by category (recon, password attacks, wireless, exploitation, web hacking, post-exploitation, frameworks).

The all-time top

8 projects · by stars

#1 · gentilkiwi/mimikatz
mimikatz
A small Windows security tool, originally written to learn C. It is best known for extracting plaintext passwords, hashes, PIN codes and Kerberos tickets from memory, and can perform pass-the-hash, pass-the-ticket or build Golden tickets.
21.9K
#2 · sundowndev/hacker-roadmap
hacker-roadmap
This is a curated roadmap and toolkit index for learning and practicing ethical hacking: it explains what penetration testing is and groups hundreds of security tools, wordlists and references by category (recon, password attacks, wireless, exploitation, web hacking, post-exploitation, frameworks).
15.7K
#3 · GTFOBins/GTFOBins.github.io
GTFOBins.github.io
GTFOBins is a curated list of Unix-like executables that can be abused to bypass local security restrictions in misconfigured systems — for example, binaries a restricted user can turn into a root shell.
13.8K

4
PowerSploit
13.1KPowerShellMafia/PowerSploit · PowerShell
PowerSploit is a collection of PowerShell modules that penetration testers use during all phases of an assessment, covering code execution, persistence, privilege escalation, credential theft, exfiltration and reconnaissance on Windows systems.
5
fsociety
12.3KManisso/fsociety · Python
fsociety is a penetration testing toolkit that bundles dozens of existing hacking tools (Nmap, sqlmap, WPScan, Reaver, etc.) behind one menu-driven script, inspired by the tools used in the 'Mr. Robot' TV series.
6
TheFatRat
11.5Kscreetsec/TheFatRat · C
TheFatRat is an exploiting tool that compiles malware from famous payloads — an easy way to generate backdoors built to slip past most anti-virus software.
7
LaZagne
11KAlessandroZ/LaZagne · Python
LaZagne is an open-source tool that retrieves passwords stored locally on a computer by reverse-engineering the storage method of each software (plaintext, APIs, custom algorithms, databases, etc.).
8
Claude-Red
7.6KSnailSploit/Claude-Red · Python
claude-red is a curated library of offensive security skills for the Claude Skills system: structured SKILL.md files that prime Claude with expert-level methodology for one attack surface each, from SQLi to shellcode.