Payload Generation

danielbohannon/invoke-obfuscation

PowerShell Obfuscator

nathanlopez/stitch

Python Remote Administration Tool (RAT)

ambionics/phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

undeadsec/socialfish

Modern dynamic phishing toolkit for authorized red team exercises. Clones login pages, captures credentials, cookies, and 2FA codes with a live…

jonathansalwan/ropgadget

Search for ROP gadgets in ELF, PE, Mach-O, and Raw binaries across x86, ARM, MIPS, and RISC-V architectures. Supports automated ROP chain generation…

trustedsec/unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell…

t3l3machus/hoaxshell

A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.

lascc/hacktools

The all-in-one browser extension for offensive security professionals 🛠

jonaslejon/malicious-pdf

Generate malicious PDF test files for penetration testing, bug bounty hunting, and red teaming. Tests SSRF, XSS, XXE, NTLM credential theft, and data…

aydinnyunus/keylogger

Get Keyboard,Mouse,ScreenShot,Microphone Inputs from Target Computer and Send to your Mail.

pwntester/ysoserial.net

Deserialization payload generator for a variety of .NET formatters

joaomatosf/jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

dana-at-cp/backdoor-apk

backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have…

marten4n6/evilosx

An evil RAT (Remote Administration Tool) for macOS / OS X.

cobbr/covenant

Covenant is a collaborative .NET C2 framework for red teamers.

tarunkant/gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

designativedave/androrat

Remote Administration Tool for Android devices