
Sandman
NTP-based backdoor for hardened networks, delivering and executing arbitrary shellcode via spoofed NTP traffic with optional persistence as a Windows…
command-and-controlpayload-generationpersistence-mechanisms+2
819

NTP-based backdoor for hardened networks, delivering and executing arbitrary shellcode via spoofed NTP traffic with optional persistence as a Windows…

Sinister is Windows/Linux Keylogger Generator which sends key-logs via email with other juicy target info

Scanner for the Mini Shai-Hulud npm/PyPI supply chain worm (NHS CC-4781 · CVE-2026-45321). Detects gh-token-monitor persistence, payload artefacts,…

some python3 functions to add spreading features to any python backdoor

Python alternative to Mimikatz lsadump::dcshadow