Sandbox evasion modules written in PowerShell, Python, Go, Ruby, C, C#, Perl, and Rust.

Remote Administration Tool for Windows

Tool for tunnel

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

socks4 reverse proxy for penetration testing

Impacket is a collection of Python classes for working with network protocols.

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

A "tiny" meterpreter stager

Empire is a PowerShell and Python post-exploitation agent.

PowerShell Obfuscator

Powershell C2 Server and Implants

Leak of new enderman.ch

Embeds a PowerShell script in the pixels of a PNG file and generates a oneliner to execute

Tunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled environments.

Responder is a LLMNR and NBT-NS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

Remote Administration Tool for Android devices

Remote execution, like PsExec

HTran is a connection bouncer, a kind of proxy server. A “listener” program is hacked stealthily onto an unsuspecting host anywhere on the Internet. When it receives signals from the actual target system, it redirects it to the hacker’s server.

Docker base image for repo2docker containing Quarto used by andrew