#1Tools for maintaining long-term access to compromised systems, even after reboots.
Kitploit recommended

Full-spectrum Linux adversary simulation platform with kernel-level stealth, C2 beaconing, privilege escalation, credential harvesting, lateral…
Repository hosting a hypothetical EDR Spoofer, as discovered originally by Nightmare-Eclipse

Generate Proxy DLLs in Rust

Discover DYLD_INSERT_LIBRARIES hijacks on macOS

A script to automate keystrokes through a graphical desktop program.

Bypassing EDR's with stealthy c++ telegram Bot and Telegram itself as C2 interface !

Blog post exploring macOS App Sandbox, entitlements via codesign, and sandbox escape techniques using launchd, LaunchAgents, and quarantine…

Exploit systems using older WinRAR without knowing their username (unlike other projects)

A listener profile for the Mythic C2 framework that utilizes AI vendors file API's

A Windows Remote Administration Tool in Visual Basic with UNC paths

Stealthy IIS backdoor using hidden ISAPI filter for persistent remote access, data exfiltration, and on-the-fly exploit injection via custom HTTP…

A simple C2 Framework written in modern C++

WORK IN PROGRESS. RAT written in C++ using Win32 API

Linux Persistence Detection, Hunting and Artifact Collection script

An interactive CLI application for interacting with authenticated Jupyter instances.

Reverse engineering analysis of PureRAT RAT abusing msbuild.exe, extracting C2 infrastructure, .NET evasion APIs, file system manipulation, and…

Windows tool that disables Driver Signature Enforcement by patching kernel variables, allowing unsigned drivers to load for testing and research.

In progress persistent download/upload/execution tool using Windows BITS.