ply2nite

webshellbackdoor-1

WebShell Backdoor Collection.

fuzzilli

A JavaScript Engine Fuzzer

CyberChef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

venom

venom - shellcode generator/compiler/handler (metasploit)

WebGoat

WebGoat is a deliberately insecure application

AwesomeScript

AntSword Shell 脚本分享/示例

TheFatRat

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .

webshellphp

WebShell php

HTTP-revshell

Powershell reverse shell using HTTP/S protocol with AMSI bypass and Proxy Aware

Awsome-shells

Collection of reverse shells

netspy

Espia trafico de la red NETSPY.sh ( hackingyseguridad.com )

meterpeter

C2 Powershell Command & Control Framework with BuiltIn Commands (Modules)

SillyRAT

A Cross Platform multifunctional (Windows/Linux/Mac) RAT.

xss-payload-list

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

BDFProxy

Patch Binaries via MITM: BackdoorFactory + mitmProxy.

rfi-lfi-payload-list

🎯 RFI/LFI Payload List

diccionarios

Diccionarios de: usuarios, passwords, XSS, Dorks, etc .. ( hackingyseguridad.com )

webshellasp

WebShell ASP

command-injection-payload-list

🎯 Command Injection Payload List

websploit

Websploit is a high level MITM framework

rcmd

Minimal windows reverse shell with proxy support

fuzzer

fuzzer http ( hackingyseguridad.com )

directoriotraversal

Directorio traversal - Path traversal - Directory traversal ( hackingyseguridad.com )

webshellSample

webshell sample for WebShell Log Analysis

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

Notes

K8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

webshell-bypass

webshell-bypass

pentest-wiki

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

win-backdoor

persistent windows backdoor with reverse shell