Tools

f1r3k0/cve-2025-52136

Exploit for CVE-2025-52136 enabling RCE on EMQX control panel via plugin upload, with MQTT-based command agent and SOCKS5 tunnel for out-of-band C2…

eladshamir/rpc-backdoor

A basic emulation of an "RPC Backdoor"

codextf2/cobaltstrike-headless

Aggressorscript that turns the headless aggressor client into a (mostly) functional cobalt strike client.

tdragon6/supershell

Supershell C2 远控平台，基于反向SSH隧道获取完全交互式Shell

rasta-mouse/spawnwith

Cobalt Strike BOF that spawns a process using another user's token and injects Beacon shellcode, enabling post-exploitation and lateral movement via…

rasta-mouse/ost-c2-spec

Open Source C&C Specification

nccgroup/fenrir

PoC to tunnel the Meterpreter reverse HTTP shell over RDP Virtual Channels

razureink/fucker

Penetration testing framework with AI-driven decision engine

adminempire/meshdeck

MeshDeck port for Arch Linux ARM - Wilson

brav0hax/smbexec

Rapid psexec-style attack tool using Samba for remote command execution, credential dumping, and lateral movement across Windows networks with hash…

blue0x1/rosemary

Rosemary: Cross-platform kernel-level pivoting over QUIC. No TUN/TAP. No proxychains. No proxy settings.

mr-in4inci3le/sliver-gui

A desktop operator console for Sliver C2, built with Wails. Provides a native, lightweight GUI interface for Sliver by directly interfacing with its…

marcorosa/cnc-botnet-in-python

C&C Botnet written in Python with fabric

operatorequals/smbrat

A Windows Remote Administration Tool in Visual Basic with UNC paths

petercunha/goat

🐐 GoAT (Golang Advanced Trojan) is a trojan that uses Twitter as a C&C server

decoder-it/printerbugnew

The DCERPC only printerbug.py version

klezvirus/rpcproxyinvoke

Simple POC library to execute arbitrary calls proxying them via NdrServerCall2 or similar

yeeb1/socktail

Lightweight Go binary that joins a device to a Tailscale network and exposes a local SOCKS5 proxy for ephemeral red team access. Supports…