A collection of hacking tools, resources and references to practice ethical hacking.

security roadmap hacking penetration-testing pentesting post-exploitation pentest exploitation hacking-tool frameworks information-gathering web-hacking hacktools

• Updated Oct 16, 2023

GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.

linux unix reverse-shell binaries post-exploitation bypass exfiltration blueteam redteam bind-shell gtfobins

• Updated May 27, 2026
• YAML

fsociety Hacking Tools Pack – A Penetration Testing Framework

python network desktop finder brute-force-attacks post-exploitation exploitation port-scanning information-gathering web-hacking fsociety penetration-testing-framework fsociety-hacking

• Updated Jul 21, 2026
• Python

An open-source post-exploitation framework for students, researchers and developers.

encrypted-connections post-exploitation platform-independent no-dependencies reverse-shells

• Updated Oct 18, 2026
• Python

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

android python windows linux shell backdoor reverse-shell rat pentesting post-exploitation remote-access payload mac-os meterpreter pupy reflective-injection remote-admin-tool

• Updated Mar 22, 2024
• Python

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

agent golang http2 post-exploitation c2 command-and-control

• Updated Oct 15, 2026
• Go

Adversary simulation and Red teaming platform with AI

agent ai viper post-exploitation metasploit-framework cobalt-strike redteam red-team-tools llm mcp-server

• Updated May 31, 2026

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

golang security pentesting post-exploitation offensive-security tunneling pivoting pentest-tool redteam

• Updated Sep 26, 2026
• Go

A tool to dump the login password from the current linux user

post-exploitation password-extraction

• Updated Sep 5, 2025
• C

Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device.

android hack backdoor adb exploit hacking android-device rat remote-shell post-exploitation android-debug-bridge kali-linux exploitation-framework remote-access android-rat hacking-tools android-hacking android-hack android-exploit entysec

• Updated Nov 1, 2025
• Python

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

backdoor persistence hacking blackhat post-exploitation stealth privilege-escalation webshell php-backdoor web-hacking c2 hacktool command-and-control hacking-framework redteam php-webshell php-webshell-backdoor advanced-persistent-threat

• Updated May 6, 2024
• Python

An evil RAT (Remote Administration Tool) for macOS / OS X.

python macos mac backdoor reverse-shell osx python3 rat macosx pentesting post-exploitation

• Updated Feb 10, 2021
• Python

SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

shell bash ssh security scanner hacking cybersecurity pentesting post-exploitation exploitation worm security-tools vulnerability-scanner redteam hacking-tools ssh-hacking exploitation-tool

• Updated Nov 11, 2026
• Shell

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

c-sharp dotnet python3 ironpython post-exploitation security-tools red-teams dotnet-script boolang dotnet-dlr

• Updated Dec 6, 2023
• Boo

venom - C2 shellcode generator/compiler/handler

compiler handler rat shellcode post-exploitation msfvenom metasploit reverse-tcp-shell multi-platform-payloads

• Updated Dec 9, 2023
• Shell

Stealthy, Linux-first multi-operator C2 with a self-healing mesh, in-memory execution, and an AI-driven MCP assistant.

windows linux rootkit malware active-directory rat post-exploitation stealth hacking-tool c2 penetration-testing-framework redteaming redteam trojan-malware emp3r0r

• Updated Nov 12, 2026
• Go

Extract Windows credentials directly from VM memory snapshots and virtual disks

virtualbox vmware esxi ntlm post-exploitation qcow2 offensive-security vdi vmdk vhdx mimikatz lsass

• Updated Nov 1, 2026
• Rust

Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

agent kubernetes golang security containers http2 post-exploitation security-tools c2 penetration-testing-framework command-and-control red-teams penetration-testing-tools redteam-tools

• Updated Feb 3, 2025
• Go

C2/post-exploitation framework

python pyqt5 python3 spyware post-exploitation pentest offensive-security red-team security-tools pentest-tool command-and-control qtframework

• Updated Jul 28, 2021
• Python

ToRat is a Remote Administation tool written in Go using Tor as a transport mechanism and RPC for communication

windows linux golang reverse-shell cross-platform persistence tor rpc transport rat keylogger post-exploitation payload privilege-escalation remote-admin-tool uac-bypass command-and-control shell-reverse reverse-shells uacbypass

• Updated Mar 13, 2023
• Go