React2Shell
4nuxd/react2shellR2S is a comprehensive exploitation and post-exploitation framework targeting the Next.js React Server Components vulnerability (CVE-2025-55182). It…
command-and-controlcontainer-escapedata-exfiltration+7
4nuxd/react2shellR2S is a comprehensive exploitation and post-exploitation framework targeting the Next.js React Server Components vulnerability (CVE-2025-55182). It…
george-yanni/deeprootCVE-2021-3493 OverlayFS privilege escalation exploit framework with advanced red team features. Includes persistence mechanisms, post-exploitation…
rapid7/metasploit-frameworkOpen-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…
malwaredllc/byobAn open-source post-exploitation framework for students, researchers and developers.
powershellmafia/powersploitPowerSploit - A PowerShell Post-Exploitation Framework
trustedsec/speculaModular command-and-control framework abusing Microsoft Outlook's Home Page feature for stealthy persistence, remote access, and post-exploitation.
pennyw0rth/netexecPost-exploitation framework for automated network authentication testing, credential harvesting, and lateral movement across Windows/AD environments…
petercunha/goat🐐 GoAT (Golang Advanced Trojan) is a trojan that uses Twitter as a C&C server
xm0kht4r/phoenix-frameworkPost-exploitation framework that abuses trusted sites like Telegram and Discord for C2.
enigma0x3/powershell-c2PowerShell-based command and control framework using website-hosted payloads for persistent remote access and post-exploitation on Windows systems.
jakobfriedl/conquestConquest is a feature-rich and malleable command & control/post-exploitation framework developed in Nim.
trustedsec/tapThe TrustedSec Attack Platform is a reliable method for droppers on an infrastructure in order to ensure established connections to an organization.
erarnitox/malvexc2A simple C2 Framework written in modern C++
kaandemir993/advanced-loader-reverse-engineering"In-depth reverse engineering analysis of an advanced multi-phase loader targeting Shellhost.exe, amsi.dll, mstscax.dll, and clbcatq.dll using module…
flags-alt/abyss-c2Full-stack C2 framework for IoT exploitation (CVE-2020-25078) with real-time web panel, multi-source target acquisition, vulnerability scanning,…
screetsec/vegileThis tool will setting up your backdoor/rootkits when backdoor already setup it will be hidden your spesisifc process,unlimited your session in…
0xthirteen/staykitCobalt Strike extension for post-exploitation persistence using SharpStay .NET assembly. Provides GUI-driven persistence via Registry keys, Scheduled…