#1Tools for creating and customizing malicious code or instructions to execute after exploitation.
Kitploit recommended
puliczek/cve-2021-44228-poc-log4j-bypass-words🐱💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks
nealbridges/vulnhunterAgentic AI security scanner that reasons like an attacker over source code, confirms exploitable flaws with executable PoCs, and drives test-first…
sighook/pixloadImage Payload Creating/Injecting tools
viralmaniar/powershell-ratPython based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows…
screetsec/vegileThis tool will setting up your backdoor/rootkits when backdoor already setup it will be hidden your spesisifc process,unlimited your session in…
whwlsfb/burpcryptoBurpSuite plugin for encrypting payloads with AES, RSA, DES, or custom JS code, enabling automated decryption of front-end encrypted traffic during…
tanc7/exocet-av-evasionEXOCET - AV-evading, undetectable, payload delivery tool
0xsp-srd/mortarevasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)
funnywolf/pystingerBypass firewall for traffic forwarding using webshell
hadi999/nxcryptNXcrypt - 'python backdoor' framework
capture0x/xss-loaderXss Payload Generator ~ Xss Scanner ~ Xss Dork Finder
icyguider/nimcrypt2.NET, PE, & Raw Shellcode Packer/Loader Written in Nim
hasherezade/exe_to_dllConverts a EXE into DLL
tomiwa-ot/mouktharAndroid remote administration tool
blackarch/webshellsVarious webshells. We accept pull requests for additions to this collection.
frkngksl/shoggothPolymorphic encryptor that transforms shellcode, PE, and COFF files into obfuscated, position-independent payloads with RC4 and random block cipher…
schira4396/vcenterkiller一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webshell，命令执行或者上传…
