#1Tools for maintaining long-term access to compromised systems, even after reboots.
Kitploit recommended
rvrsh3ll/bof_collectionVarious Cobalt Strike BOFs
0x09al/iis-raidA native backdoor module for Microsoft IIS (Internet Information Services)
alex3434/wmi-static-spooferSpoofing the Windows 10 HDD/diskdrive serialnumber from kernel without hooking
byt3bl33d3r/offensivedlrToolbox containing research notes & PoC code for weaponizing .NET's DLR
kkevsterrr/backdoormepowerful auto-backdooring utility
praetorian-inc/chromealoneA tool to transform Chromium browsers into a C2 Implant
werkamsus/lilithLilith - Foundational reverse engineering resource for cybersecurity entrepreneurs in C++
qax-a-team/cobaltstrike-toolsetAggressor Script, Kits, Malleable C2 Profiles, External C2 and so on
quantumcore/paradoxiaratParadoxiaRat : Native Windows Remote access Tool.
saumyajeetdas/godgenesisA Python3 based C2 server to make life of red teamer a bit easier. The payload is capable to bypass all the known antiviruses and endpoints.
knight0x07/impulsivedllhijackC# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be…
mwsrc/plasmaratRemote Access Trojan(RAT), Miner, DDoS
aegrah/panixCustomizable Linux Persistence Tool for Security Research and Detection Engineering.
mvelazc0/purplesharpPurpleSharp is a C# adversary simulation tool that executes adversary techniques with the purpose of generating attack telemetry in monitored Windows…
coalfire-research/slackorA Golang implant that uses Slack as a command and control server
nickvourd/com-hunterWindows COM hijacking persistence tool with search, classic, Task Scheduler, and TreatAs modes. Available as .NET executable and Cobalt Strike BOF…
outflanknl/sharphideTool to create hidden registry keys.
0xthirteen/sharpstay.NET tool for installing Windows persistence via registry keys, scheduled tasks, services, WMI events, COM hijacks, and LNK backdoors, supporting…
