#1Tools for creating and customizing malicious code or instructions to execute after exploitation.
Kitploit recommended


Cobalt Strike extension for post-exploitation persistence using SharpStay .NET assembly. Provides GUI-driven persistence via Registry keys, Scheduled…

Hacking systems with the automation of PasteJacking attacks.

Metaphor - Stagefright with ASLR bypass

This script automates SQL injection testing using SQLMap with AI-powered decision making.

Hide your payload in DNS

Ghostcat read file/code execute,CNVD-2020-10487(CVE-2020-1938)


A modular framework for benchmarking LLMs and agentic strategies on security challenges across HackTheBox, TryHackMe, PortSwigger Labs, Cybench,…

Venom C2 is a dependency‑free Python3 Command & Control framework for redteam persistence

Collection of bypass gadgets to extend and wrap ysoserial payloads

A simple to use USB HID Rubber Ducky Launch Pad for Android.

High-Performance word generator with a per-position configureable charset

JSshell - JavaScript reverse/remote shell

Conquest is a feature-rich and malleable command & control/post-exploitation framework developed in Nim.

Rustcat(rcat) - The modern Port listener and Reverse shell

WePWNise generates architecture independent VBA code to be used in Office documents or templates and automates bypassing application control and…

This repo contains : simple shellcode Loader , Encoders (base64 - custom - UUID - IPv4 - MAC), Encryptors (AES), Fileless Loader (Winhttp, socket)