phpsploit
nil0x42/phpsploitFull-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
command-and-controlexploit-frameworkspayload-development+6
nil0x42/phpsploitFull-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
trustedsec/speculaModular command-and-control framework abusing Microsoft Outlook's Home Page feature for stealthy persistence, remote access, and post-exploitation.
vonahisec/pentesting_scriptsThis repository contains a list of tools that may be useful for consultants performing penetration testing engagements.
t3l3machus/villainVillain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with…
mythicagents/nimplantA cross-platform implant written in Nim
gl4ssesbo1/nebulaNebula is a cloud C2 Framework, which at the moment offers reconnaissance, enumeration, exploitation, post exploitation on AWS, but still working to…
mrwadams/stride-gptAn AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat models for a given application based on the STRIDE…
nettitude/poshc2A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.
redsiege/c2concealerGenerates randomized, lint-validated C2 malleable profiles for Cobalt Strike, automating HTTP/S, DNS, SMB, and SSH beacon configuration with…
mythicagents/medusaCross-platform C2 agent for Mythic with dynamic function loading, SOCKS5 proxy, file operations, shellcode injection, and macOS/Windows…
fraunhofer-aisec/galliaExtendable pentesting framework for automotive UDS interfaces, enabling reproducible scans, diagnostic trouble code reading, and post-processing via…
mythicagents/thanatosMythic C2 agent targeting Linux and Windows hosts written in Rust
pucarasec/zuthakaOpen-source C2 integration framework providing a unified web interface for managing multiple command-and-control instances, listeners, agents, and…
n1ckdunn/exploitivatorAutomate Metasploit scanning and exploitation
bhavsec/autopentest-aiAgentic Pentesting MCP server that discovers, exploits, and reports web application vulnerabilities.
trustedsec/tapThe TrustedSec Attack Platform is a reliable method for droppers on an infrastructure in order to ensure established connections to an organization.
jas502n/msfconsole-termuxHow To Install Metasploit-Table on the Android Termux
adityasingh108/cve-2026-31431-metasploit-exploitAutomated Metasploit post-exploitation module for CVE-2026-31431 ("Copy Fail"). Weaponizes a deterministic logic flaw in the Linux kernel AF_ALG…