Empire
bc-security/empireEmpire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
adversarial-attackcommand-and-controldata-exfiltration+16
5.3k
bc-security/empireEmpire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
cobbr/eliteElite is the client-side component of the Covenant project. Covenant is a .NET command and control framework that aims to highlight the attack…
enigma0x3/powershell-c2PowerShell-based command and control framework using website-hosted payloads for persistent remote access and post-exploitation on Windows systems.
youmulijiang/evil-winrarevil-winrar,CVE-2023-38831漏洞利用和社会工程学攻击框架 (evil-winrar, CVE-2023-38831 Vulnerability Exploitation and Social Engineering Attack Framework)
qi4l/jysoDual-purpose JNDI injection and Java deserialization exploitation framework with advanced bypass capabilities for WAF, RASP, and high JDK versions.…
cybertechajju/cve-2025-55184-poc-expolitProfessional-grade Denial of Service (DoS) exploitation framework for CVE-2025-55184 targeting React Server Components. Features 8 attack modes, WAF…
untouchable17/cve-2025-24054Windows File Explorer Zero Click NTLMv2-SSP Hash Disclosure
acedef/synthaptPlaybook-based adversary simulation framework that compiles JSON-defined attack paths into position-independent shellcode payloads for validating…
d4vinci/pastejackerHacking systems with the automation of PasteJacking attacks.
alienwithin/owasp-mth3l3m3nt-frameworkOWASP Mth3l3m3nt Framework is a penetration testing aiding tool and exploitation framework. It fosters a principle of attack the web using the web as…
hatriot/clusterdapplication server attack toolkit
joelgmsec/autordpwnThe Shadow Attack Framework
trustedsec/unicornUnicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell…
bishopfox/sliverAdversary Emulation Framework
cobbr/covenantCovenant is a collaborative .NET C2 framework for red teamers.
ruped24/killchainA unified console to perform the "kill chain" stages of attacks.
darmado/atomic-red-team-c2ARTi-C2 is a post-exploitation framework used to execute Atomic Red Team test cases with rapid payload deployment and execution capabilities via…
bw3ll/rop_rocketROP ROCKET is an advanced code-reuse attack framework, with extensive ROP chain generation capabilities, including for novel Windows Syscalls attack,…