The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning. Learn more →
Top 23 post-exploitation Open-Source Projects
-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
-
pupy
Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C
-
merlin
Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang. (by Ne0nd0g)
-
Ghost
Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device. (by EntySec)
-
WorkOS
The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
-
SILENTTRINITY
An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR
-
SSH-Snake
SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.
-
kubesploit
Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.
-
Teardroid-phprat
:india: :robot: It's easy to use android botnet work without port forwarding, vps and android studio
-
PowerHub
A post exploitation tool based on a web application, focusing on bypassing endpoint protection and application whitelisting
-
Forensia
Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase.
-
swap_digger
swap_digger is a tool used to automate Linux swap analysis during post-exploitation or forensics. It automates swap extraction and searches for Linux user credentials, web forms credentials, web forms emails, http basic authentication, Wifi SSID and keys, etc.
-
GTFONow
Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
I learned about chisel in PEN-200 / preparing for the OSCP.
Then I learned about, Ligolo-ng [1] which is a game-changer. I highly recommend checking it out. It is most applicable to a penetration test. It uses TLS so I'm not sure it could be used to address the issue mentioned in the article.
[1] https://github.com/nicocha30/ligolo-ng
1 year ago i have create a android botnet called teardroid and its open source i was using a free service which allow hosting python serverless web application
Project mention: PsMapExec - Active Directory and Windows Lateral Movement | /r/Infosec | 2023-10-21
post-exploitation related posts
- Haven't been using kali in a long time and wanted to know why Ngrok is not working on Blackeye? blackeye itself doesn't exist anymore lol
- PaulNorman01/Forensia
- Ideas of how to integrate ML into vulnerable scanning
- Forensia: Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase.
- Heroinn: A cross platform C2/post-exploitation framework.
- Alanframework - A c2 post-exploitation framework
- AlanFramework: A C2 post-exploitation framework now open source
-
A note from our sponsor - WorkOS
workos.com | 29 Apr 2024
Index
What are some of the best open-source post-exploitation projects? This list will help you:
Project | Stars | |
---|---|---|
1 | fsociety | 10,086 |
2 | byob | 8,753 |
3 | pupy | 8,129 |
4 | merlin | 4,932 |
5 | mimipenguin | 3,679 |
6 | Viper | 3,482 |
7 | Ghost | 2,533 |
8 | EvilOSX | 2,171 |
9 | ligolo-ng | 2,139 |
10 | SILENTTRINITY | 2,135 |
11 | SSH-Snake | 1,809 |
12 | venom | 1,709 |
13 | emp3r0r | 1,209 |
14 | kubesploit | 1,071 |
15 | BlackMamba | 990 |
16 | Teardroid-phprat | 735 |
17 | PowerHub | 693 |
18 | PsMapExec | 660 |
19 | Forensia | 661 |
20 | Heroinn | 618 |
21 | swap_digger | 496 |
22 | GTFONow | 491 |
23 | AlanFramework | 460 |
Sponsored