A collection of hacking tools, resources and references to practice ethical hacking.

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

fsociety Hacking Tools Pack – A Penetration Testing Framework

An open-source post-exploitation framework for students, researchers and developers.

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

A tool to dump the login password from the current linux user

Attack Surface Management & Red Team Simulation Platform 互联网攻击面管理&红队模拟平台

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device.

An evil RAT (Remote Administration Tool) for macOS / OS X.

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

venom - C2 shellcode generator/compiler/handler

Linux/Windows post-exploitation framework made by linux user

Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

C2/post-exploitation framework

ToRat is a Remote Administation tool written in Go using Tor as a transport mechanism and RPC for communication

🤖 It's easy to use android botnet work without port forwarding, vps and android studio