reave

REAVE Reave는 하이퍼바이저 엔드포인트에 특화된 사후 침투 프레임워크로, Python으로 작성되었습니다. 현재 개발 중입니다. Reave는 전통적인 리스너/에이전트 모델을 따릅니다. 사용자는 여러 리스너를 설정할 수 있으며, 각 리스너는 다수의 에이전트를 수락할 수 있습니다. 현재 프레임워크는 Python 에이전트를 제공하며, 다음과 같은 기능을 지원합니다: 에이전트와의 대화형 터미널 세션 하이퍼바이저 자동 정보 수집: 설치된 게스트 시스템 마운트된 네트워크 공유 및 데이터스토어 연결된 로컬 사용자 하이퍼바이저가 속한...

AdaptixC2

AdaptixC2 v1.2 2月28日：v1.2版本有哪些变化？ Adaptix 是一个可扩展的后渗透与对抗仿真框架，专为授权渗透测试而设计。Adaptix 服务器采用 Go 语言编写，以提供操作灵活性。GUI 客户端基于 C++ QT 开发，可在 Linux、Windows 和 MacOS 操作系统上运行。完整文档可在此处获取。 法律警告 本工具仅适用于授权安全测试与红队行动。未经授权的使用被严格禁止，并可能违反当地及国际法律。使用风险自负。 快速开始 请查看 wiki。 特性 支持多人协作的服务器/客户端架构 跨平台 GUI 客户端 全加密通信 监听器与代理作为插件（可扩展）...

PsMapExec

PsMapExec 🚀 PsMapExec란 무엇인가? PsMapExec 는 잘 알려진 CrackMapExec / NetExec 도구에서 크게 영감을 받은 PowerShell 기반 사후 침투 프레임워크입니다. 이 도구는 해당 도구들의 익숙한 모양과 기능을 네이티브 PowerShell에 가져오면서 자체적인 개선 사항을 갖추고 있습니다. 침투 테스터가 Active Directory 환경을 쉽게 평가하고 제압할 수 있도록 설계되었습니다. ⭐ PsMapExec를 즐기고 계신가요? 프로젝트에 별표를 눌러 지지를 보여주시고 널리 알려주세요....

barq

barq barq: AWSクラウドのポストエクスプロイテーションフレームワーク！ それは何ですか？ barqは、実行中のAWSインフラストラクチャに対する攻撃を簡単に実行できるポストエクスプロイテーションフレームワークです。元のインスタンスのSSHキーペアがなくても、実行中のEC2インスタンスを攻撃できます。また、AWSに保存されたシークレットやパラメータの列挙と抽出も可能です。 前提条件 既存のAWSアカウントのアクセスキーIDとシークレット（場合によってはトークンも） Python 2または3。両方で動作します。...

RedGhost

RedGhost 레드 팀이 지속성, 정찰, 권한 상승 및 흔적을 남기지 않는 것을 지원하도록 설계된 Linux 사후 침투 프레임워크입니다. Payloads netcat, bash, python, php, ruby, perl에서 다양한 인코딩된 역방향 셸을 생성하는 기능 SudoInject "sudo"가 실행될 때마다 권한 상승을 위해 역방향 루트 셸을 실행하는 래퍼 함수로 sudo 명령을 주입하는 기능 lsInject "ls"가 실행될 때마다 지속성을 위해 페이로드를 실행하는 래퍼 함수로 "ls" 명령을 주입하는 기능...

byob

質問がありますか？ ドキュメントを確認するか、Discordサポートサーバーに参加してください。 免責事項 : このプロジェクトは、許可されたテストまたは教育目的のみに使用されるべきです。 BYOBは、学生、研究者、開発者向けのオープンソースのポストエクスプロイテーションフレームワークです。以下の機能が含まれています： 直感的なユーザーインターフェースを備えたコマンド＆コントロールサーバー 複数プラットフォーム向けのカスタムペイロードジェネレーター 12のポストエクスプロイテーションモジュール...

rpef

ルーター侵入後フレームワーク 現在、このフレームワークには多数のファームウェアイメージモジュールが含まれています。 root@kitploit: 'Verified' - This module is confirmed to work and is stable. 'Unverified' - This module is believed to work or should work with little additional effort, but awaits being tested on a physical device. 'Testing' - This module ...

Neo

Neo C2 フレームワーク モジュラーなサーバークライアントアーキテクチャのポストエクスプロイテーションフレームワーク。レッドチーム運用やセキュリティテストにおける協調エージェント管理のために構築されました。オペレーターが独自の拡張モジュールを追加できる柔軟性を提供します。 インストール • エージェントとステージャー • プロファイルとリスナー • モジュール • マルチプレイヤー • SOCKS5 • タスクオーケストレーション 機能 スケーラビリティ：...

TornadoRevC2

TornadoRevC2 A lightweight, modular post-exploitation framework for authorized security research, red-team operations, and penetration testing. TornadoRevC2 manages interactive reverse shell and bind shell sessions on Linux and Windows hosts through a unified operator console, across plain TCP,...

Empire v7.0.2

Empire Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers. The Empire server is written in Python 3 and is modular to allow operator flexibility. Empire comes built-in with a client that can be used remotely to access the server...

lightweight-msf

Lightweight-MSF !License: MIThttps://img.shields.io/badge...

BYOB 安全漏洞

BYOB Build Your Own Botnet is an open source post-exploitation framework for students, researchers and developers by malwaredllc individual developers. BYOB has a security vulnerability that originates from unauthenticated remote code execution via arbitrary file writes and command injection...

New EX-22 Tool Empowers Hackers with Stealthy Ransomware Attacks on Enterprises

A new post-exploitation framework called EXFILTRATOR-22 aka EX-22 has emerged in the wild with the goal of deploying ransomware within enterprise networks while flying under the radar. "It comes with a wide range of capabilities, making post-exploitation a cakewalk for anyone purchasing the tool,...

UPDATE: Empire v3.4.0

Empire v3.4.0 was released a couple of days ago! I briefly mentioned about this tool in my old post titled - List of Open Source C2 Post-Exploitation Frameworks. This new version brings support for Malleable C2 listeners and reflective file loading among other bug fixes. What is Empire? Empire 3....

UPDATE: Empire 3.1.0

Empire 3.1.0 was released a few hours ago! If you remember, I briefly mentioned about this tool in my five month old post titled – List of Open Source C2 Post-Exploitation Frameworks. It’s a very good thing that, BC-Security has taken over the development of the tool and has made some awesome...

UPDATE: Empire 3.0.1

Empire 3.0.1 release was a real surprise for me as about a week ago Empire 3.0 was released. I hadn't gotten around to test it all and then we have a new release already! If you remember, I briefly mentioned about this tool in my five month old post titled - List of Open Source C2 Post-Exploitati...

The Empire Multiuser GUI: Empire GUI

The Empire Multiuser GUI is a graphical interface to the Empire post-exploitation Framework. It was written in Electron and utilizes websockets SocketIO on the backend to support multiuser interaction. The main goal of this project is to enable red teams, or any other color team, to work together...