#3RAT analysis, detection signatures, behavioral analysis, and research frameworks.
Kitploit recommended
sshuttle/sshuttleTransparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS…
mr-un1k0d3r/thundershellPython / C# Unmanaged PowerShell based RAT
iss4cf0ng/duplexspycsAn open-source, C#-based remote administration tool (RAT), enabling complete control of a remote Windows machine, designed for legitimate remote…
abhishekkr/n00bratRemote Administration Toolkit (or Trojan) for POSiX (Linux/Unix) system working as a Web Service
correcthorsebatterystaple-sudo/orwell-rat-and-botnetOrwell is a RAT and Botnet designed as a trio of programs.
de3vil/stealingThe SteaLinG is an open-source penetration testing framework designed for social engineering
lithium876/controll_remote_access_trojanCreated a VERY SIMPLE remote access Trojan that will establish administrative control over any windows machine it compromises.
ahhh/ntp_trojanReverse NTP remote access trojan in python, for penetration testers
h3xduck/umbraA LKM rootkit targeting 4.x and 5.x kernel versions which opens a backdoor that can spawn a reverse shell to a remote host, launch malware and more.
the404hacking/windows-python-ratA New Microsoft Windows Remote Administrator Tool [RAT] with Python by Sir.4m1R.
classic130/cve-2023-38408Proof-of-concept exploit for CVE-2023-38408, demonstrating remote code execution in OpenSSH's forwarded ssh-agent.
shadowopcode/desckvb-ratFull analysis of a never documented before Remote Access Trojan linked to Pjoao1578 toolchain
shadowforge-cyber/cve-2026-65660-pocMalicious Register Directive Code Injection Exploit
jakubie07/cve-2026-1731Proof-of-concept exploit for CVE-2026-1731, a blind RCE in BeyondTrust Privileged Remote Access and Remote Support, allowing remote command execution…
demon-i386/zoshrinkc2DNS over HTTPS targeted malware (only runs once)
stphivos/rat-shellWindows Remote Access Trojan (RAT)
