#3RAT analysis, detection signatures, behavioral analysis, and research frameworks.
Kitploit recommended
digiprosec/microtrickSelf-contained Python PoC exploiting the MikroTrick SSH chain (CVE-2026-86060, CVE-2026-67279) to gain unauthenticated full admin access on MikroTik…
gsoffmarket/malvinciThis simple but powerful script will introduce a new type of malware that will turn off the firewall, start an HTTP server, forward its port through…
nicocha30/ligolo-ngAn advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
qwqdanchun/dcratA simple remote tool in C#.
pennyw0rth/netexecPost-exploitation framework for automated network authentication testing, credential harvesting, and lateral movement across Windows/AD environments…
kamalx06/tornadoc2Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, ECDSA-signed tasking, and a multi-operator team server with…
cryst4linqq/turkoratFully undetected grabber (grabs wallets, passwords, cookies, modifies discord client etc.)
mwsrc/betterratBetter Remote Access Trojan
abraxas/veneficusSuper elite end-to-end implant 0day. Full kill-chain. Exploit, escalate, pivot, poison, persistence.
artbitrage/stealth-kid-ratStealth Kid RAT (SKR) is an open-source multi-platform Remote Access Trojan (RAT) written in C#. Released under MIT license. The SKR project is fully…
maorbuskila/windows-x64-ratRemote Access Trojan (RAT) for Windows x64 using a combination of vulnerability CVE-2023-38831 (WinRAR < 6.23 vulnerability) and Shellcode…
pushpenderindia/thorseTHorse is a RAT (Remote Administrator Trojan) Generator for Windows/Linux systems written in Python 3.
adaptix-framework/adaptixc2AdaptixC2 is a highly modular advanced redteam toolkit
frenchcisco/ratelRAT-el is an open source penetration test tool that allows you to take control of a windows machine. It works on the client-server model, the server…
xlinshan/coldrootMac OS Trojan (RAT) made with love <3
cenobyte-vincit/slot2UEFI GRUB2 bootkit that installs a pre-boot networked implant via NVRAM boot option, chainloads a UKI, executes a dracut payload, and kexecs the…
manturever/xworm-rat⭐️The famous XWorm RAT, version 2.1. Educational purposes only
ne0nd0g/merlinMerlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
