An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
Repository Index
72,862 visible repositories in the index
1–24 of 26 · Most stars
Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .
- thefatrat
- bypass
- linux
- autorun
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.
- doorkeeper
- oauth
- oauth2-provider
- oauth2-server
TranslatedPrivilege escalation code embedded in the Pinduoduo apk, and analysis of dynamically delivered dex
- pdd
A Simple android remote administration tool using sockets. It uses java on the client side and python on the server side
- android
- backdoor
- python
- reverse-shell
notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)
Patch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors
- file-infector
- bdf
- python
- capstone
Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device.
- adb
- android-device
- android
- android-debug-bridge
Open-Source Remote Administration Tool For Windows C# (RAT)
- socket
- tcp
- rat
- remote
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
- rootkit
- lkm-rootkit
- c
- kernel
An evil RAT (Remote Administration Tool) for macOS / OS X.
- rat
- reverse-shell
- macos
- macosx
A collection of PHP backdoors. For educational or testing purposes only.
- php
- php-backdoor
- webshell
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.
Limit access to your Laravel applications by using invite codes
- php
- laravel
- laravel-package
- doorman
Customizable Linux Persistence Tool for Security Research and Detection Engineering.
Scans for accessibility tools backdoors via RDP
A simple, secure CLI tool designed to manage secrets (for humans and agents)
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
Tools to make Plug, and Phoenix authentication simple and flexible.
Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise
- detection
- splunk
- bpfdoor
- vulnerability
Mimicry is a dynamic deception tool that actively deceives an attacker during exploitation and post-exploitation.
- backdoor
- honeypot
- incident-response
- security