BeEF is a modular security testing environment designed for browser exploitation and web application auditing. It functions as a platform for security professionals to evaluate client-side defenses by injecting persistent scripts into web browsers, establishing a bidirectional communication channel for remote command execution and data exfiltration. The framework distinguishes itself through its ability to use compromised browser sessions as proxies to conduct internal network reconnaissance, effectively bypassing perimeter security controls. It utilizes an event-driven control interface and
Nishang is a PowerShell-based offensive security framework designed for red teaming and penetration testing on Windows targets. It functions as a post-exploitation toolkit and payload generator to automate attacks and manage remote targets. The project provides specialized capabilities for bypassing security controls, such as disabling the Antimalware Scan Interface and employing in-memory execution to avoid disk-based detection. It includes a variety of stealthy command and control mechanisms, utilizing non-standard channels like DNS TXT records, ICMP traffic, and webmail for communication a
Stitch is a command and control framework and post-exploitation toolkit designed for managing multiple remote systems from a central server. It functions as a remote administration tool and payload builder, enabling the execution of commands and the deployment of agents across different operating systems. The project features a cross-platform builder for generating custom executable agents with configurable network bindings and boot behaviors. It utilizes encrypted communication channels to secure traffic between the controller and remote clients, and it supports the execution of dynamic scri
Gcat A stealthy Python based backdoor that uses Gmail as a command and control server
byt3bl33d3r/gcat 的主要功能包括：Command And Control Frameworks, Exploitation and Payloads。
byt3bl33d3r/gcat 的开源替代品包括： beefproject/beef — BeEF is a modular security testing environment designed for browser exploitation and web application auditing. It… nathanlopez/stitch — Stitch is a command and control framework and post-exploitation toolkit designed for managing multiple remote systems… samratashok/nishang — Nishang is a PowerShell-based offensive security framework designed for red teaming and penetration testing on Windows… adrianvollmer/powerhub — PowerHub. bats3c/shad0w — A post exploitation framework designed to operate covertly on heavily monitored environments. antoniococo/sharpyshell — SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications.
