#1C2 frameworks, redirectors, listeners, and command infrastructure tools.
Kitploit recommended

Socks proxy, and reverse socks server using powershell.
Aggregated Zeek-format threat intelligence feeds with combined indicators from public and curated sources for continuous IDS and network threat…

A utility to safely generate malicious network traffic patterns and evaluate controls.

C2 front flow control tool with JA3/JARM fingerprint randomization, domain fronting, malleable C2 profile validation, and IP whitelisting to evade…

Android remote administration tool

Lightweight RAT providing silent remote command-line access, hidden file download/execution, and persistence mechanisms for Windows systems.…

HVNC for Cobalt Strike

GC2 is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet or Microsoft SharePoint…

一款针对Vcenter的综合利用工具,包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j,提供一键上传webshell,命令执行或者上传…

DeimosC2 is a Golang command and control framework for post-exploitation.

Netcat with automated NAT traversal, secure P2P, and advanced features for shell access, file transfer, and network proxying.

SharpWMI is a C# implementation of various WMI functionality.

LSTAR - CobaltStrike 综合后渗透插件

PCShare是一款强大的远程控制软件,可以监视目标机器屏幕、注册表、文件系统等。

Android Remote Access Trojan

a open source remote administrator tool

Proof-of-concept exploit for CVE-2020-5902, a directory traversal and remote code execution vulnerability in F5 BIG-IP TMUI. Includes file read,…

NTP-based backdoor for hardened networks, delivering and executing arbitrary shellcode via spoofed NTP traffic with optional persistence as a Windows…