All Categories → Security → post-exploitation

Top 80 post-exploitation open source projects

RSPET (Reverse Shell and Post Exploitation Tool) is a Python based reverse shell equipped with functionalities that assist in a post exploitation scenario.

✭ 251

python security hacking pentesting security-audit backdoor post-exploitation reverse-shell

Leprechaun

This tool is used to map out the network data flow to help penetration testers identify potentially valuable targets.

✭ 232

ruby post-exploitation privilege-escalation

Enumy

Linux post exploitation privilege escalation enumeration

✭ 210

c automation vulnerability-scanners post-exploitation oscp

Hrshell

HRShell is an HTTPS/HTTP reverse shell built with flask. It is an advanced C2 server with many features & capabilities.

✭ 193

python security hacking flask pentesting penetration-testing https tls injection red-team post-exploitation metasploit oscp tornado reverse-shell

Dns Persist

DNS-Persist is a post-exploitation agent which uses DNS for command and control.

✭ 191

pentesting redteam post-exploitation

Fudgec2

FudgeC2 - a command and control framework designed for team collaboration and post-exploitation activities.

✭ 191

python python3 powershell security security-tools cybersecurity redteam post-exploitation offensive-security

Mouse

Mouse Framework is an iOS and macOS post-exploitation framework that gives you a command line session with extra functionality between you and a target machine using only a simple Mouse payload. Mouse gives you the power and convenience of uploading and downloading files, tab completion, taking pictures, location tracking, shell command execution, escalating privileges, password retrieval, and much more.

✭ 186

python ios macos hacking exploit hacking-tool kali-linux remote-control payload backdoor hacker post-exploitation metasploit jailbreak exploitation-framework

Poet

[unmaintained] Post-exploitation tool

✭ 184

python security pentest rat post-exploitation beacon

Msf Auxiliarys

My collection of metasploit auxiliary post-modules

✭ 183

ruby post-exploitation metasploit

Zombieant

Zombie Ant Farm: Primitives and Offensive Tooling for Linux EDR evasion.

✭ 169

c linux dfir post-exploitation evasion

Enumdb

Relational database brute force and post exploitation tool for MySQL and MSSQL

✭ 167

python python3 database mysql pentesting pentest-tool enumeration brute-force post-exploitation mssql

Oscp Pentest Methodologies

备考 OSCP 的各种干货资料/渗透测试干货资料

✭ 166

c pentesting penetration-testing ctf cybersecurity pentest-tool redteam post-exploitation oscp websecurity

Proton

Proton Framework is a Windows post-exploitation framework similar to other Windows post-exploitation frameworks. The major difference is that the Proton Framework does most of its operations using Windows Script Host, with compatibility in the core to support a default installation of Windows 2000 with no service packs all the way through Windows 10.

✭ 142

python windows hacking hacking-tool kali-linux registry remote-control payload backdoor rat post-exploitation metasploit privilege-escalation exploitation-framework

Herakeylogger

Chrome Keylogger Extension | Post Exploitation Tool

✭ 138

python python3 chrome post-exploitation keylogger

Evilosx

An evil RAT (Remote Administration Tool) for macOS / OS X.

✭ 1,826

python Dockerfile macos pentesting osx mac macosx backdoor rat post-exploitation reverse-shell

Evasor

A tool to be used in post exploitation phase for blue and red teams to bypass APPLICATIONCONTROL policies

✭ 134

post-exploitation

Silenttrinity

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

✭ 1,767

Boo python XSLT dotnet security-tools post-exploitation ironpython red-teams dotnet-script boolang dotnet-dlr

Bella

Bella is a pure python post-exploitation data mining tool & remote administration tool for macOS. 🍎💻

✭ 112

python macos pentesting data-mining post-exploitation

Postexploits

(windows) post exploitation: dll injection, process hollowing, RunPe, Keyloggers, UacByPass etc..

✭ 111

post-exploitation keylogger

Awesome Malware

💻⚠️ A curated collection of awesome malware, botnets, and other post-exploitation tools.

✭ 108

awesome awesome-list malware cybersecurity post-exploitation

Punk.py

unix SSH post-exploitation 1337 tool

✭ 107

python ssh penetration-testing unix pentest-tool post-exploitation offensive-security

Thoron

Thoron Framework is a Linux post-exploitation framework that exploits Linux TCP vulnerability to provide a shell-like connection. Thoron Framework has the ability to create simple payloads to provide Linux TCP attack.

✭ 87

ruby linux pentesting exploit vulnerability linux-kernel vulnerabilities kali-linux remote-control backdoor rat post-exploitation reverse-shell

Atomic Red Team Intelligence C2

ARTi-C2 is a post-exploitation framework used to execute Atomic Red Team test cases with rapid payload deployment and execution capabilities via .NET's DLR.

✭ 87

python python3 csharp dotnet redteam post-exploitation offensive-security mitre-attack

Pentesting toolkit

🏴‍☠️ Tools for pentesting, CTFs & wargames. 🏴‍☠️

✭ 1,268

c linux hacking reverse-engineering network cryptography pentesting infosec ctf vulnerabilities forensics post-exploitation web-security steganography

Phpsploit

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

✭ 1,188

python hacking redteam persistence backdoor post-exploitation privilege-escalation webshell

Gtfonow

Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries

✭ 68

python linux pentesting unix ctf post-exploitation bypass privilege-escalation sudo

Intersect 2.5

Post-Exploitation Framework

✭ 59

python penetration-testing post-exploitation

Decryptrdcmanager

.NET 4.0 Remote Desktop Manager Password Gatherer

✭ 59

post-exploitation net-framework

Ghost

Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device. Ghost Framework gives you the power and convenience of remote Android device administration.

✭ 992

python hack android hacking exploit kali-linux adb backdoor rat post-exploitation exploitation-framework

Pxenum

A shell script that automatically performs a series of *NIX enumeration tasks.

✭ 30

shell linux hacking enumeration post-exploitation

Venom

venom - shellcode generator/compiler/handler (metasploit)

✭ 904

shell shellcode compiler rat post-exploitation metasploit handler

Fsociety

fsociety Hacking Tools Pack – A Penetration Testing Framework

✭ 7,224

python shell Dockerfile network desktop exploitation information-gathering post-exploitation finder penetration-testing-framework brute-force-attacks port-scanning web-hacking fsociety fsociety-hacking

Hacker Roadmap

📌 Your beginner pen-testing start guide. A guide for amateur pen testers and a collection of hacking tools, resources and references to practice ethical hacking and web security.

✭ 7,752

hacking penetration-testing pentest hacking-tool exploitation vulnerabilities information-gathering roadmap post-exploitation frameworks web-hacking hacktools

Pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python

✭ 6,737

python c C++go Makefile C#android linux windows pentesting payload backdoor rat post-exploitation reverse-shell meterpreter remote-access mac-os pupy reflective-injection remote-admin-tool

Byob

An open-source post-exploitation framework for students, researchers and developers.

✭ 6,949

python HTML shell PHP no-dependencies post-exploitation zero-configuration platform-independent encrypted-connections antiforensics reverse-shells

Bashark

Bash post exploitation toolkit

✭ 602

shell bash post-exploitation

Pyexfil

A Python Package for Data Exfiltration

✭ 554

python slack dns qrcode ftp post-exploitation bgp quic steganography packets icmp

Blackmamba

C2/post-exploitation framework

✭ 544

python python3 security-tools pentest pentest-tool pyqt5 red-team post-exploitation offensive-security

Viper

metasploit-framework 图形界面 / 图形化内网渗透工具

✭ 487

docker redteam post-exploitation viper metasploit-framework

Vegile

This tool will setting up your backdoor/rootkits when backdoor already setup it will be hidden your spesisifc process,unlimited your session in metasploit and transparent. Even when it killed, it will re-run again. There always be a procces which while run another process,So we can assume that this procces is unstopable like a Ghost in The Shell

✭ 478

shell linux postgresql ghost infinite-scroll backdoor post-exploitation metasploit rootkit

Gtfobins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

✭ 6,030

HTML SCSS python TeX Makefile ruby emacs lisp linux unix redteam post-exploitation bypass reverse-shell blueteam binaries exfiltration bind-shell gtfobins

Go Shellcode

Load shellcode into a new process

✭ 456

go shellcode windows redteam post-exploitation

Mssqlproxy

mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse

✭ 433

python proxy post-exploitation mssql

Powerhub

A post exploitation tool based on a web application, focusing on bypassing endpoint protection and application whitelisting

✭ 431

python powershell pentest post-exploitation

Covertutils

A framework for Backdoor development!

✭ 424

python shell pentesting encryption stream crypto agent payload post-exploitation reverse-shell rce handler steganography

Emp3r0r

linux post-exploitation framework made by linux user

✭ 419

go linux malware hacking-tool redteam rat post-exploitation rootkit

Torat

ToRat is a Remote Administation tool written in Go using Tor as a transport mechanism and RPC for communication

✭ 415

go golang linux windows cross-platform rpc tor persistence payload rat post-exploitation keylogger reverse-shell privilege-escalation transport

Sifter

Sifter aims to be a fully loaded Op Centre for Pentesters

✭ 403

shell network pentesting penetration-testing scanner osint pentest exploitation recon post-exploitation vulnerability-scanner

Swap digger

swap_digger is a tool used to automate Linux swap analysis during post-exploitation or forensics. It automates swap extraction and searches for Linux user credentials, web forms credentials, web forms emails, http basic authentication, Wifi SSID and keys, etc.

✭ 354

shell security hacking dfir forensics post-exploitation

Orc

Orc is a post-exploitation framework for Linux written in Bash

✭ 349

shell bash post-exploitation

Pivotsuite

Network Pivoting Toolkit

✭ 329

python hacking pentest-tool redteam enterprise post-exploitation

Merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

✭ 3,522

go http2 agent post-exploitation c2 command-and-control

Windows Post Exploitation

Windows post-exploitation tools, resources, techniques and commands to use during post-exploitation phase of penetration test. Contributions are appreciated. Enjoy!

✭ 296

hacking command-line hacking-tool post-exploitation

Mimipenguin

A tool to dump the login password from the current linux user

✭ 3,151

c shell python Makefile post-exploitation password-extraction

gtfo

Search for Unix binaries that can be exploited to bypass system security restrictions.

✭ 88