How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
Nishang is a PowerShell-based offensive security framework designed for red teaming and penetration testing on Windows targets. It functions as a post-exploitation toolkit and payload generator to automate attacks and manage remote targets. The project provides specialized capabilities for bypassing security controls, such as disabling the Antimalware Scan Interface and employing in-memory execution to avoid disk-based detection. It includes a variety of stealthy command and control mechanisms, utilizing non-standard channels like DNS TXT records, ICMP traffic, and webmail for communication a
Stitch is a command and control framework and post-exploitation toolkit designed for managing multiple remote systems from a central server. It functions as a remote administration tool and payload builder, enabling the execution of commands and the deployment of agents across different operating systems. The project features a cross-platform builder for generating custom executable agents with configurable network bindings and boot behaviors. It utilizes encrypted communication channels to secure traffic between the controller and remote clients, and it supports the execution of dynamic scri
SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications
The main features of antoniococo/sharpyshell are: Command And Control Frameworks, Persistence, Webshells.
Projects with overlapping indexed features include: nil0x42/phpsploit — Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor. samratashok/nishang — Nishang is a PowerShell-based offensive security framework designed for red teaming and penetration testing on Windows… nathanlopez/stitch — Stitch is a command and control framework and post-exploitation toolkit designed for managing multiple remote systems… adrianvollmer/powerhub — PowerHub. bc-security/empire — Empire is a post-exploitation command-and-control (C2) framework designed for red team operations. It deploys and… bats3c/shad0w — A post exploitation framework designed to operate covertly on heavily monitored environments.
