#1RAT development frameworks, detection tools, and post-exploitation remote access utilities.
Kitploit recommended
h3x0v3rl0rd/php_reverse_shellSimple PHP reverse shell script for establishing remote command execution on target systems. Ideal for penetration testing and security assessments.
bc-security/empireEmpire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
david-alvarez-rosa/php-rceExploits for CVE-2026-109618 / CVE-2026-109619 to achieve RCE on PHP targets
mishakorzik/allhackingtoolsAll-in-One Hacking Tools For Hackers! And more hacking tools! For termux.
rapid7/metasploit-frameworkOpen-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…
yasserbdj96/hiphpPHP-based backdoor tool for remote website control via HTTP/HTTPS. Enables file management, command execution, and Tor connectivity with…
khush-613/cve-2026-44011-pocPython proof-of-concept exploit for CVE-2026-44011, an authenticated RCE in Craft CMS via Yii behavior injection, with two-stage command output…
omnigodz/cve-2022-1388This repository consists of the python exploit for CVE-2022-1388 (F5's BIG-IP Authentication Bypass to RCE)
go-gost/gostGO Simple Tunnel - a simple tunnel written in golang
bastillion-io/bastillionBastillion gives you a clean, browser-based way to manage SSH access across all your systems—like a bastion host with a friendly dashboard.
wangyihang/platypus:hammer: A modern, cross-platform machine manager
dagowda/notrdpHavoc C2 plugin that creates a hidden Windows desktop, streams it to a browser viewer, and injects mouse/keyboard input for covert remote control.
softethervpn/softethervpnCross-platform multi-protocol VPN server and client supporting SSL-VPN, WireGuard, OpenVPN, IPsec, L2TP, MS-SSTP, L2TPv3 and EtherIP with AES-256…
its-a-feature/mythicA collaborative, multi-platform, red teaming framework
0asylum/cve-2026-31857CraftCMS has an RCE vulnerability via relational conditionals in the control panel
yarrick/iodineTunnel IPv4 data through DNS servers to bypass firewall restrictions and provide covert network access for penetration testing.
firerpa/lamdaAndroid Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MITM, built-in Frida,…
hironull/cve-2018-1207-betterReverse Shell CVE for iDRAC 7 & 8 with firmware 2.52.52.52 and below.
