Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
Repository Index
71,372 visible repositories in the index
1–17 of 17 · Most stars
A Simple android remote administration tool using sockets. It uses java on the client side and python on the server side
- android
- backdoor
- python
- reverse-shell
💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh
- penetrationtesting
- pentesting
- pentesting-tools
- penetration-testing
Patch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors
- file-infector
- bdf
- python
- capstone
Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device.
- adb
- android-device
- android
- android-debug-bridge
A script that you can run in the background!
Open-Source Remote Administration Tool For Windows C# (RAT)
- socket
- tcp
- rat
- remote
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
- rootkit
- lkm-rootkit
- c
- kernel
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
- golang
- http-server
- https-server
- ctf
Customizable Linux Persistence Tool for Security Research and Detection Engineering.
Scans for accessibility tools backdoors via RDP
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat
Golang packer that use process hollowing
- av-bypass
- av-evasion
- golang
- packer