#1Tools for maintaining long-term access to compromised systems, even after reboots.
Kitploit recommended
screetsec/vegileThis tool will setting up your backdoor/rootkits when backdoor already setup it will be hidden your spesisifc process,unlimited your session in…
boku7/loki🧙♂️ Node.js Command & Control for Script-Jacking Vulnerable Electron Applications
m00nrise/processhiderPost-exploitation tool for hiding processes from monitoring applications
tomiwa-ot/mouktharAndroid remote administration tool
ahxr/ghostLightweight RAT providing silent remote command-line access, hidden file download/execution, and persistence mechanisms for Windows systems.…
zeromemoryex/chaos-rootkitNow You See Me, Now You Don't
redcode-labs/basharkBash post exploitation toolkit
lintstar/lstarLSTAR - CobaltStrike 综合后渗透插件
xdnice/pcsharePCShare是一款强大的远程控制软件，可以监视目标机器屏幕、注册表、文件系统等。
mwsrc/betterandroratAndroid Remote Access Trojan
idov31/sandmanNTP-based backdoor for hardened networks, delivering and executing arbitrary shellcode via spoofed NTP traffic with optional persistence as a Windows…
cr4sh/smmbackdoorFirst open source and publicly available System Management Mode backdoor for UEFI based platforms. Good as general purpose playground for various SMM…
ajinabraham/xenotix-python-keyloggerXenotix Python Keylogger for Windows.
xiaolichan/wmiexec-proNew generation of wmiexec.py
ghostpack/forgecertForge certificates for Active Directory authentication using stolen Certificate Authority private keys, enabling persistent domain access with forged…
fr0gger/awesome_malware_techniquesThis is a repository of resource about Malware techniques
med0x2e/gadgettojscriptA tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA…
med0x2e/executeassemblyLoad/Inject .NET assemblies by; reusing the host (spawnto) process loaded CLR AppDomainManager, Stomping Loader/.NET assembly PE DOS headers,…
