metasploit-framework
rapid7/metasploit-frameworkOpen-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…
command-and-controldatabase-securitydata-exfiltration+20
rapid7/metasploit-frameworkOpen-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…
alessandroz/lazagneCross-platform credential recovery tool that extracts stored passwords from browsers, email clients, databases, system mechanisms, and network…
ghostpack/seatbeltC# host-survey tool for offensive and defensive security, performing extensive safety checks on Windows systems including user, system, and network…
ldpreload/blacklotusUEFI bootkit for Windows with Secure Boot bypass, kernel-level persistence, and encrypted HTTPS C2. Features HVCI/UAC bypass, API hooking, and…
last-byte/persistencesniperPowershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines.…
malwares/remote-access-trojanWindows-based remote access trojan (RAT) for covert system control, payload delivery, and data exfiltration. Intended for authorized security…
xdnice/pcshareHTTP-based remote access tool with DLL injection, process hollowing, and system hooking for persistent control, screen monitoring, file exfiltration,…
cr4sh/smmbackdoorFirst open source and publicly available System Management Mode backdoor for UEFI based platforms. Good as general purpose playground for various SMM…
quantumcore/paradoxiaratNative Windows remote access tool with stealth client, reflective DLL injection, keylogger, Chrome password recovery, reverse shell, file system…
sailay1996/cdpsvclpeWindows Local Privilege Escalation via CdpSvc service (Writeable SYSTEM path Dll Hijacking)
grahamhelton/uspEstablishes persistence on a Linux system by creating a udev rule that triggers the execution of a specified payload (binary or script)
lethal-forensics/macos-collectorShell script for automated collection and analysis of macOS forensic artifacts, including persistence enumeration, unified logs, and file system…
phackt/wptsextensions.dllBuilds a malicious DLL that abuses Windows Task Scheduler's DLL search order to execute a script as SYSTEM during local privilege escalation.
mattiaalessi/phantom-keyloggerStealth-enabled keystroke and visual intelligence gathering system for authorized red team operations. Features persistent surveillance, C2 tunnel,…
mustafadalga/wildloggerThis is a keylogger that collects all the data and e-mail it in a set time with system information which includes device S/N and hardware specs,…
al1ex/monitorWindows persistence technique using AddMonitor to load a malicious DLL with SYSTEM privileges, enabling remote C2 via Meterpreter.
mwsrc/schwarze-sonne-ratRemote Access Trojan (RAT) providing covert command-and-control, payload delivery, and post-exploitation capabilities for targeted system access and…
tomiwa-ot/telegram-c2Telegram bot-based C2 framework for remote system control, file exfiltration, screen/webcam capture, and service enumeration with stealthy deployment.