post-exploitation

A collection of hacking tools, resources and references to practice ethical hacking.

GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.

fsociety Hacking Tools Pack – A Penetration Testing Framework

An open-source post-exploitation framework for students, researchers and developers.

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

Adversary simulation and Red teaming platform with AI

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

A tool to dump the login password from the current linux user

Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device.

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

An evil RAT (Remote Administration Tool) for macOS / OS X.

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

venom - C2 shellcode generator/compiler/handler

Linux-first multi-operator C2 built to stay quiet and keep working. Self-healing mesh with assisted discovery, in-memory execution with encrypted storage, scriptable agents, cross-platform BOFs, SOCKS5 pivoting, and a modular C agent delivered by a sleep-masking stager.

Extract Windows credentials directly from VM memory snapshots and virtual disks

Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

C2/post-exploitation framework

ToRat is a Remote Administation tool written in Go using Tor as a transport mechanism and RPC for communication