k8gege/K8tools

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

6203 stars · 2053 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

K8tools is a large curated collection of penetration testing and offensive security tools covering internal network penetration, privilege escalation, exploit delivery, password cracking, scanning, and evasion. It aggregates exploits for common web applications (Struts2, Weblogic, Tomcat, JBoss, etc.) along with shellcode, payloads, and post-exploitation utilities.

Use cases

• find exploits for struts2 weblogic tomcat getshell
• privilege escalation tools for windows internal network pentest
• brute force and password cracking during authorized pentest
• scan internal network for live hosts and vulnerable services
• bypass UAC and evade antivirus during red team engagement
• collect poc and 0day exploits for vulnerability testing

When to choose

• you are doing authorized penetration testing or red team work and want a broad toolkit of exploits and post-exploitation utilities
• you need quick access to privilege escalation, password cracking, and web getshell exploits in one download
• you want a Windows-centric offensive toolkit usable from cmd or webshell

When to avoid

• you need a single well-maintained tool with documentation rather than a mixed bag of binaries and scripts
• you require guaranteed clean, audited code - the collection includes modified binaries of unclear provenance
• your use is defensive-only and you just want vulnerability scanning without offensive capabilities

Facets

cli-tool · maturity active

penetration-testing vulnerability-scanning security networking penetration-testing security developer-tools windows cli python exploit-collection privilege-escalation password-cracking webshell 0day pentest-toolkit offensive-security red-team command-line linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="k8gege/K8tools")