#1Tools for maintaining long-term access to compromised systems, even after reboots.
Kitploit recommended
jimywork/cromosCromos is a tool for downloading legitimate extensions of the Chrome Web Store and inject codes in the background of the application.
zerodaylab/powersploitPowerSploit - A PowerShell Post-Exploitation Framework
dviros/rat-via-telegramWindows Remote Post Breach Tool via Telegram
synacktiv/dlhellLocal & remote Windows DLL Proxying
s3n4t0r-0x0/rustywater-shellcode-dropperRustyWater represents the main payload and the backbone of the entire adversarial operation in Static Kitten group attacks.
cyborgsecurity/poisonappleCLI tool for applying and removing macOS persistence mechanisms, designed for threat emulation and red team operations. Supports 17 techniques…
viralmaniar/phirauteeA proof of concept crypto virus to spread user awareness about attacks and implications of ransomwares. Phirautee is written purely using PowerShell…
je5442804/wptaskscheduler_cve-2024-49039WPTaskScheduler RPC Persistence & CVE-2024-49039 via Task Scheduler
namazso/dll-proxy-generatorGenerate a proxy dll for arbitrary dll
the404hacking/windows-python-ratA New Microsoft Windows Remote Administrator Tool [RAT] with Python by Sir.4m1R.
rek7/postshellPostShell - Post Exploitation Bind/Backconnect Shell
shutdownrepo/dcshadowPython alternative to Mimikatz lsadump::dcshadow
praetorian-inc/swarmerA tool to convert windows registry export files into windows hive files that can be used to replace NTUSER.MAN
grahamhelton/uspEstablishes persistence on a Linux system by creating a udev rule that triggers the execution of a specified payload (binary or script)
ricardojoserf/sharpcoverttubeYoutube as C2 channel - Control Windows systems uploading QR videos to Youtube
jxroot/zeropulse🔒 Modern C2 Platform with Cloudflare Tunnel Integration | WinRM & SSH Remote Management | Real-time Terminal & Remote Desktop | Built with FastAPI &…
licitrasimone/crystalsliverCrystal Palace Evasion kit for Sliver
matheuzsecurity/elfdoor-gccLD_PRELOAD-based tool that hijacks gcc to inject malicious code into binaries during linking, enabling stealthy backdoor deployment without source…
