#1Tools for creating and customizing malicious code or instructions to execute after exploitation.
Kitploit recommended

Generates anti-copy malware launchers using Process Ghosting to bypass AV/EDR signature scanning and prevent automatic sample submission. Supports…
Spring4Shell Proof Of Concept/And vulnerable application CVE-2022-22965

C# tool that generates malicious VBA macros with shellcode injection, VBA purging, and sandbox detection for red team operations.

Nimbo-C2 is yet another (simple and lightweight) C2 framework

macOS Initial Access Payload Generator

WebLogic wls9-async反序列化远程命令执行漏洞

Generate polymorphic, position-independent virtual machines (PIVMs) from arbitrary x86/x64 shellcode.

Automated DLL Sideloading Tool With EDR Evasion Capabilities

C# Reflective loader for unmanaged binaries.

k0otkit is a universal post-penetration technique which could be used in penetrations against Kubernetes clusters.

Spring4Shell - Spring Core RCE - CVE-2022-22965

Simple POC for exploiting WhatsApp double-free bug in DDGifSlurp in decoding.c in libpl_droidsonroids_gif

CVE-2020-0688_EXP Auto trigger payload & encrypt method

Python exploit for CVE-2015-1538-1 targeting Stagefright's 'stsc' MP4 atom integer overflow to achieve remote code execution and a reverse shell on…

Log4Shell RCE Exploit - fully independent exploit does not require any 3rd party binaries.

FruityC2 is a post-exploitation (and open source) framework based on the deployment of agents on compromised machines. Agents are managed from a web…

Pack/Encrypt/Obfuscate ELF + SHELL scripts

Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test…