nukeratframework/nukeratA post exploitation framework for advanced Red Team operations
Post exploitation framework
Documentation · Armory · Tutorial
NukeRat is a post exploitation framework for advanced Red Team operations, focused on exploiting modern and complex environments. Some of its features and characteristics include:
| Feature | Description |
|---|---|
| Armory | +550 adapted BOF and .NET utilities |
| Communication | Custom C2 with external platforms (e.g. Telegram, Discord, etc.) |
| Runtime evasion | Indirect syscalls, stack spoofing, sleep mask, AMSI/ETW patch, etc. |
| Injections | Allocation modes: VirtualAlloc, section, and module stomping |
| LOTL | Living off the Land integration with +240 native Windows binaries (LOLBAS) |
| Static evasion | PE customization |
| Implants | Cross platform: Windows, Linux, macOS (ARM support) |
| Linux | Implants compatible with Linux BOFs |
| AI | Integration with agents (DeepSeek, local, etc.) |
| Reports | Executed commands, IOCs, and compromised hosts |
Installation
git clone https://github.com/nukeratframework/nukerat && cd nukerat && sudo bash install.sh all
Create operator key
./nukerat.py server key add operator
Server start
./nukerat.py server start
Client start
./nukerat.py client start
For the full fast setup, from installation through implant creation, see https://nukerat.com/docs/fast-setup.
You can read the full NukeRat documentation at https://nukerat.com/docs. Available languages:
| Language | Link |
|---|---|
| English | en-us |
| Spanish | es-es |
| Korean | ko-kr |
| Chinese (Simplified) | zh-cn |
| Russian | ru |
| Persian | fa-ir |
| Japanese | ja-jp |
NukeRat is licensed under GPLv3. Other licenses in this repo: