A collection of hacking tools, resources and references to practice ethical hacking.

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

fsociety Hacking Tools Pack – A Penetration Testing Framework

An open-source post-exploitation framework for students, researchers and developers.

Pupy is an opensource, cross-platform (Windows, linux, OSX, Android) C2 and post-exploitation framework written in python and C

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

Adversary simulation and Red teaming platform with AI

A tool to dump the login password from the current linux user

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device.

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

An evil RAT (Remote Administration Tool) for macOS / OS X.

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

venom - C2 shellcode generator/compiler/handler

linux/Windows post-exploitation framework made by linux user

Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

C2/post-exploitation framework

ToRat is a Remote Administation tool written in Go using Tor as a transport mechanism and RPC for communication

A post exploitation tool based on a web application, focusing on bypassing endpoint protection and application whitelisting