Command and Control

r00t-3xp10it/trojanizer

Trojanize your payload - WinRAR (SFX) automatization - under Linux distros

joelgmsec/http-shell

Multiplatform HTTP reverse shell providing a shell-like interface over HTTP, with file upload/download, command history, auto-reconnection, and sudo…

its-arun/cve-2022-39197

Proof-of-concept exploit for CVE-2022-39197, enabling remote code execution against CobaltStrike <= 4.7.1 via malicious SVG payload served over HTTP.

oldkingcone/slopshell

the only php webshell you need.

mr-xn/sunlogin_rce

向日葵 RCE

matheuzsecurity/ringreaper

Linux post-exploitation agent that uses io_uring to stealthily bypass EDR detection by avoiding traditional syscalls.

them4hd1/vayne-rat

An Advanced C# .NET Rat, It’s Stable and Contains Many Features.

umutcamliyurt/pingrat

ICMP-based command-and-control tool that tunnels C2 traffic through firewalls using ping payloads, undetectable by most AV/EDR solutions.

idov31/venom

Venom is a library that meant to perform evasive communication using stolen browser socket

hoodoer/js-tap

JavaScript beacons and C2 to be used for XSS payload or post exploitation implants on webapp servers or desktop software to monitor users and…

r00t-3xp10it/meterpreter_paranoid_mode-ssl

Meterpreter Paranoid Mode - SSL/TLS connections

whispergate/infraguard

InfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution

redteamoperations/pivotsuite

Network Pivoting Toolkit

jamescooteuk/sharpsphere

.NET Project for Attacking vCenter

mgeeky/stracciatella

OpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI, Constrained Language Mode and Script Block Logging disabled at startup

komomon/cve-2022-30190-follina-office-msdt-fixed

Modified CVE-2022-30190 exploit tool for MS-MSDT Office RCE with custom docx template support, binary/command execution modes, and embedded HTTP…