oldkingcone

slopShell

the only php webshell you need.

BYOSI

Evade EDR's the simple way, by not touching any of the API's they hook.

SpyGlass

SpyGlass, the all in one tool for a kickass api.

Albert

The Albert, the smart recon tool.

Wordpress-Backdoors

Wordpress capable PHP backdoors

Tucker

Like the chimera of Nina Tucker, PHP based local enumeration of windows systems.

awesome-edr-bypass

Awesome EDR Bypass Resources For Ethical Hacking

Dumped-Database

Dumped-Database

LogPoison-LFItoRCE

this is a sort of handler that helps with log poison attacks.

random_py_scripts

effective lamp! i love lamp, some custom python scripts ive cooked up. some are malicious, some are not.

Spamblaster9000

This tool does what it says in the name, it spams.

SPAMEVERYTHING

found a webhook in some malware somewhere? lets go ahead and spam it.

StandAloneBinaries

standalone binaries. rust mainly. use with caution as most could be backdoored by me.

boyfriendlist

submit pr to join the boyfriend list

brut3k1t

:artificial_satellite: brut3k1t is a security-oriented research framework for conducting bruteforce attacks against a multitude of protocols and services

C0wb0y

a suite of twitter heuristics to determine characteristics of users.

CharmingKitten

Exposing CharmingKitten's malicious activity for IRGC-IO Counterintelligence division (1500)

jesse

An advanced crypto trading bot written in Python

Leaked-Documents

Leaked-Documents

literate-spoon

Java version of Auto_Dorker

Malleable-C2-Profiles

Cobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike https://www.cobaltstrike.com/.

Mobile-Security-Framework-MobSF

Mobile Security Framework is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing framework capable of performing static analysis, dynamic analysis, malware analysis and web API testing.

Nuages

A modular C2 framework

Octopus

Open source pre-operation C2 server based on python and powershell

Okayun

here it is

oldkingcone

sliver

Adversary Emulation Framework

Striker

Striker is an offensive information and vulnerability scanner.

Web-Client-Security-Camera

Web Client Security Camera

webshells

Various webshells. We accept pull requests for additions to this collection.