#3RAT analysis, detection signatures, behavioral analysis, and research frameworks.
Kitploit recommended
mranonymoustz/cve-2019-11932-whatsapp-exploitDouble-free vulnerability in DDGifSlurp in decoding.c in libpl_droidsonroids_gif can read more…
lewis-ricardo/amaranth-projectCVE-2025-8088 exploitation chain + Quasar C2 multi-stage payload delivery
maorbuskila/windows-x64-ratRemote Access Trojan (RAT) for Windows x64 using a combination of vulnerability CVE-2023-38831 (WinRAR < 6.23 vulnerability) and Shellcode…
infiniteloopers/cve-2019-2107Proof-of-concept exploit for CVE-2019-2107, demonstrating remote code execution via crafted HEVC video on Android media framework. Includes crash…
chebuya/cve-2024-30850-chaos-rat-rce-pocCHAOS RAT web panel path RCE PoC
s3n4t0r-0x0/pixelcode-attackMalicious PixelCode is a security research project that demonstrates a covert technique for encoding executable files into pixel data and storing…
rootup/claude-pocClaude Code Remote Code Execution
shadowopcode/desckvb-ratFull analysis of a never documented before Remote Access Trojan linked to Pjoao1578 toolchain
iss4cf0ng/duplexspycsAn open-source, C#-based remote administration tool (RAT), enabling complete control of a remote Windows machine, designed for legitimate remote…
sorcerio/code-rouletteCode Roulette is a terminal interface based (TUI), online multiplayer, Russian Roulette game where the loser executes the winner's Python payload…
viralmaniar/powershell-ratPython based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows…
jm33-m0/emp3r0rSelf‑healing Gossip Mesh C2 with Assisted Peer Discovery, Cross-Platform BOF Execution, and Scriptable Agents.
pennyw0rth/netexecPost-exploitation framework for automated network authentication testing, credential harvesting, and lateral movement across Windows/AD environments…
nicocha30/ligolo-ngAn advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
jpillora/chiselFast TCP/UDP tunnel over HTTP with SSH encryption, supporting reverse port forwarding, SOCKS5 proxy, and client authentication for secure network…
tiagorlampert/chaos🔥 CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems.
parsingteam/teleshadow2TeleShadow - Telegram Desktop Session Stealer (Windows)
ne0nd0g/merlinMerlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
