
ScheduleRunner
A C# tool with more flexibility to customize scheduled task for both persistence and lateral movement in red team operation

A C# tool with more flexibility to customize scheduled task for both persistence and lateral movement in red team operation

Cobalt Strike extension for post-exploitation persistence using SharpStay .NET assembly. Provides GUI-driven persistence via Registry keys, Scheduled…

Bash post exploitation toolkit

A tool for creating hidden accounts using the registry || 一个使用注册表创建隐藏帐户的工具



TCP Port Redirection Utility

.NET tool for installing Windows persistence via registry keys, scheduled tasks, services, WMI events, COM hijacks, and LNK backdoors, supporting…

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

CLI tool for applying and removing macOS persistence mechanisms, designed for threat emulation and red team operations. Supports 17 techniques…

⭐️The famous XWorm RAT, version 2.1. Educational purposes only

A slightly more fun way to disable windows defender + firewall. (through the WSC api)

Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.


A Linux kernel rootkit in Rust using a custom made type-2 hypervisor, eBPF XDP and TC programs

LimeRAT | Simple, yet powerful remote administration tool for Windows (RAT)

Windows Remote Administration Tool via Telegram