#1Integrated platforms for developing, executing, and managing penetration tests.
Kitploit recommended
lame-projects/stratum-c2Cloud dead-drop C2 framework — RSA-4096 + AES-256-GCM, 5 cloud providers, Rust-only agents, P2P mesh, persistence engine, credential harvesting
codextf2/customc2channeltemplatetemplate for developing custom C2 channels for Cobalt Strike using IAT hooks applied by a reflective loader.
joelgmsec/kitsunePolymorphic C2 framework with graphical interface, automatic reconnection, payload generation, and integrated hacking tools for red team operations…
cobalt-strike/edenA PoC UDRL for Cobalt Strike built with Crystal Palace that combines Raphael Mudge's page streaming technique with a modular call gate (Draugr)
praetorian-inc/wasmforgeWasmForge — compile Go and C# programs to single-binary, WASM-sandboxed native executables with polymorphic output.
ikotler/hackershA free and open source command-line shell and scripting language designed especially for security testing
thirdbyte/ssjYour everyday Linux distribution gone Super Saiyan.
horizon3ai/h3-cliCLI tool for the Horizon3.ai API
pigyon/mcpwnerModel Context Protocol server for autonomous vulnerability discovery
redherd-project/redherd-frameworkRedHerd is a collaborative and serverless framework for orchestrating a geographically distributed group of assets.
chopicalqui/kaliintelligencesuiteAutomated intelligence-gathering framework that orchestrates Kali Linux tools and public APIs to collect, store, and analyze reconnaissance data for…
j-0-t/staekkaStækka Metasploit - Extenting Metasploit
professionallyevil/c4Cyberdelia, a Collection of Command and Control frameworks
jas502n/msfconsole-termuxHow To Install Metasploit-Table on the Android Termux
nccgroup/jwt-reauthCaches JWT authentication tokens from an auth URL and attaches them as headers to in-scope requests in Burp Suite for automated session handling.
xret2pwn/picklec2Encrypted C2 framework for post-exploitation and lateral movement, supporting PowerShell implants and custom modules for red team engagements.
cobalt-strike/unhook-bofRemove API hooks from a Beacon process.
kamalx06/tornadoc2Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, ECDSA-signed tasking, and a multi-operator team server with…
