Remote Access Trojan

cenobyte-vincit/slot2

UEFI GRUB2 bootkit that installs a pre-boot networked implant via NVRAM boot option, chainloads a UKI, executes a dracut payload, and kexecs the…

duyduongduyduong/cve-2024-4577-exploitation-asyncrat-deployment-dfir-investigation

Investigation of CVE-2024-4577 exploitation and AsyncRAT deployment with DFIR artifacts, IoCs, and detection guidance.

lewis-ricardo/amaranth-project

CVE-2025-8088 exploitation chain + Quasar C2 multi-stage payload delivery

tihanyin/pssw100avb

A list of useful Powershell scripts with 100% AV bypass (At the time of publication).

manturever/xworm-rat

⭐️The famous XWorm RAT, version 2.1. Educational purposes only

sermikr0/cve-2026-38426

CVE-2026-38426 — strcpy() Stack Buffer Overflow in Tasmota fetch_jpg() boundary[40] (Tasmota <= 15.3.0.3)

iss4cf0ng/duplexspycs

An open-source, C#-based remote administration tool (RAT), enabling complete control of a remote Windows machine, designed for legitimate remote…

shadowopcode/desckvb-rat

Full analysis of a never documented before Remote Access Trojan linked to Pjoao1578 toolchain

rootup/claude-poc

Claude Code Remote Code Execution

sorcerio/code-roulette

Code Roulette is a terminal interface based (TUI), online multiplayer, Russian Roulette game where the loser executes the winner's Python payload…

s3n4t0r-0x0/pixelcode-attack

Malicious PixelCode is a security research project that demonstrates a covert technique for encoding executable files into pixel data and storing…

hackerhouse-opensource/backdoors

Tools for maintaining access to systems and proof-of-concept demonstrations.

tomiwa-ot/moukthar

Android remote administration tool

corelight/zeek-asyncrat-detector

A Zeek based AsyncRAT malware detector.

machine1337/pyfud

CROSS PLATFORM REMOTE ACCESS TROJAN (RAT)

machine1337/telegramrat

Cross Platform Telegram based RAT that communicates via telegram to evade network restrictions

zarkones/bloodfangc2

Modern PIC implant for Windows (64 & 32 bit)