Sandbox evasion modules written in PowerShell, Python, Go, Ruby, C, C#, Perl, and Rust.

Remote Administration Tool for Windows

Tool for tunnel

Empire is a PowerShell and Python post-exploitation agent.

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

A "tiny" meterpreter stager

socks4 reverse proxy for penetration testing

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

Impacket is a collection of Python classes for working with network protocols.

PowerShell Obfuscator

Responder is a LLMNR and NBT-NS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

Powershell C2 Server and Implants

Leak of new enderman.ch

Tunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled environments.

Embeds a PowerShell script in the pixels of a PNG file and generates a oneliner to execute

Remote Administration Tool for Android devices

Remote execution, like PsExec

Docker base image for repo2docker containing Quarto used by andrew

HTran is a connection bouncer, a kind of proxy server. A “listener” program is hacked stealthily onto an unsuspecting host anywhere on the Internet. When it receives signals from the actual target system, it redirects it to the hacker’s server.