dnscat2

NOTE: The password for the .zip downloads are all "password"! Introduction Welcome to dnscat2, a DNS tunnel that WON'T make you sick and kill you! This tool is designed to create an encrypted command-and-control C&C channel over the DNS protocol, which is an effective tunnel out of almost every...

chalumeau

Chalumeau Chalumeau is automated,extendable and customizable credential dumping tool based on powershell and python. Main Features Write your own Payloads In-Memory execution Extract Password List Dashboard reporting / Web Interface Parsing Mimikatz Dumping Tickets Screenshots Known Issues Parsin...

AlanFramework

Alan Framework Alan Framework is a post-exploitation framework useful during red-team activities. If you find my tool useful, please consider tosponsor me. ⚠⚠⚠ Disclaimer ⚠⚠⚠ The creation of this kind of software has always caused controversies. If you're wondering why I decided to create this...

antnium

Antnium root@kitploit: Anti Tanium Un framework de C2 y un RAT escritos en Go. Este código fuente se publica públicamente como referencia para mi presentación Develop your own RAT - AV & EDR Defense. Antnium pretende cumplir mis propios requisitos, y no los de otros. Funciona para las campañas qu...

pinky

Subir una webshell es casi siempre el siguiente paso después de explotar una vulnerabilidad web, pero servicios como Cloudflare y la nueva generación de firewalls hacen un muy buen trabajo impidiendo que los atacantes ejecuten comandos en el objetivo a través de HTTP o HTTPS. Por otro lado, el...

RedbloodC2

Public version of Redblood C2 root@kitploit: This is a simple command and control server to handle sessions and your victims installation root@kitploit: $ git clone https://github.com/kira2040k/RedbloodC2.git $ cd RedbloodC2 $ npm install $ node server.js Usage root@kitploit: After install node.j...

Loki

Loki Loki es una H erramienta de A cceso R emoto. Loki utiliza RSA-2048 con AES-256 para mantener segura tu comunicación con las máquinas infectadas. Aviso legal root@kitploit: THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE...

BlackMamba

BlackMamba Command and Control What's BlackMamba? Black Mamba is a Command and Control C2 that works with multiple connections at same time. It was developed with Python and with Qt Framework and have multiples features for a post-exploitation step. Some Features Multiple clients. Real-time...

EUVD-2018-8041

Malware in sbrugna...

EUVD-2019-8046

Malware in sbrugna...

EUVD-2017-2463

Malware in sbrugna...

EUVD-2023-33068

Malicious code in bioql PyPI...

EUVD-2024-38301

Malicious code in bioql PyPI...

EUVD-2021-8146

Malicious code in bioql PyPI...

EUVD-2022-26411

Malicious code in bioql PyPI...

EUVD-2022-52755

Malicious code in bioql PyPI...

EUVD-2024-54073

Malicious code in bioql PyPI...

EUVD-2022-37171

Malicious code in bioql PyPI...

VIPER_2025

VIPER 2025 VIPER 2025 is an advanced, modular penetration...

How the FBI got everything it wanted (re-air) (Lock and Code S06E15)

This week on the Lock and Code podcast… For decades, digital rights activists, technologists, and cybersecurity experts have worried about what would happen if the US government secretly broke into people’s encrypted communications. The weird thing, though, is that, in 2018, it already happened...