Tools

rapid7/metasploit-framework

Open-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…

exploit-database/exploitdb

exploitdb // The official Exploit-Database repository

sunblaze-ucb/exploitgym

ExploitGym is a large-scale, realistic benchmark built from real-world vulnerabilities designed to evaluate AI agents' ability to develop exploits.

bishopfox/sliver

Adversary Emulation Framework

silentisvox/syscallrevenant

Clean Indirect Syscalls with Syscall Tampering.

1llu50ry/mcp-gamehacking

MCP server exposing a 4,100+ skill game-hacking and reverse-engineering knowledge base with source archives, specialized agents, subagents, plugins…

cookiengineer/actual-php2shell

🤖 NO, There is an easy way to exploit this vulnerability! (vibecoded to prove a point)

mythicagents/medusa

Cross-platform C2 agent for Mythic with dynamic function loading, SOCKS5 proxy, file operations, shellcode injection, and macOS/Windows…

dagowda/confluencec2

This is a project aimed to make every other Saas product a C2, confluence is just the beginning.

sk4r4b/ntdll-reconstruction

A technique that mixes NTDLL unhooking and hellsgate gate varients

jm00nj/icmp-ghost-a-fileless-x64-assembly-c2-agent

Fileless x64 Assembly C2 framework with dual-channel ICMP/DNS protocol pivoting, direct syscall execution, and ptrace-based process injection for…

twosevenonet/injectsetconsole

Proof of Concept for Process Code Injection Without Using WriteProcessMemory

stillbigjosh/neo

The NeoC2 Framework

trustedsec/unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell…

bytejmp/ms09-050

Python exploit for MS09-050 (CVE-2009-3103) SMBv2 srv2.sys buffer overflow, with vulnerability scanner, arch auto-detection, and x86/x64 reverse…

x-3306/project-onyx

Advanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advanced evasion…

ull0a/msrmapper

Manual kernel driver mapper for Windows x64 that abuses CVE-2025-8061 in Lenovo's LnvMSRIO.sys to perform a BYOVD attack, mapping PE64 drivers into…

winterknife/evenstar

Intel 64/Windows low-level experiments