Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python

Curated list of Unix binaries that can be exploited to bypass system security restrictions

Python Remote Administration Tool (RAT)

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

An evil RAT (Remote Administration Tool) for macOS / OS X.

iOS/macOS/Linux Remote Administration Tool

Reverse Shell as a Service

Golang安全资源合集

Chashell is a Go reverse shell that communicates over DNS. It can be used to bypass firewalls or tightly restricted networks.

pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)

Wordpress Attack Suite

HERCULES is a special payload generator that can bypass antivirus softwares.

🔨 A modern multiple reverse shell sessions manager written in go

A framework for Backdoor development!

Multiplatform reverse shell generator

Hershell is a simple TCP reverse shell written in Go.

Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).

Local file inclusion exploitation tool

A script that automates generation of OpenSSL reverse shells

🙃 Reverse Shell Cheat Sheet 🙃

RSPET (Reverse Shell and Post Exploitation Tool) is a Python based reverse shell equipped with functionalities that assist in a post exploitation scenario.

An XSS reverse shell framework

generate reverse shell from CLI for linux and Windows.

ToRat is a Remote Administation tool written in Go using Tor as a transport mechanism and RPC for communication

HRShell is an HTTPS/HTTP reverse shell built with flask. It is an advanced C2 server with many features & capabilities.

[POC] Asynchronous reverse shell using the HTTP protocol.

Reverse shell generator written in Python 3.

🔨 A multiple reverse shell session/client manager via terminal

A backdoor with a multitude of features.

C2 framework that uses Background Intelligent Transfer Service (BITS) as communication protocol and Direct Syscalls + Dinvoke for EDR user-mode hooking evasion.