post-exploitation-toolkit 开源项目推荐（20 个）

W01fh4cker /VcenterKit

Vcenter综合渗透利用工具包 | Vcenter Comprehensive Penetration and Exploitation Toolkit

redcode-labs /Bashark

Bash post exploitation toolkit

EntySec /SeaShell

SeaShell Framework is an iOS post-exploitation framework that enables you to access the device remotely, control it and extract sensitive information.

0x1CA3 /AdbNet

A tool that allows you to search for vulnerable android devices across the world and exploit them.

reveng007 /reveng_rtkit

基于 Linux 可加载内核模块（LKM）的 rootkit（ring-0），能够隐藏自身、进程/植入物，符合 rmmod 保护，并能绕过臭名昭著的 rkhunter 反根套件。

govindasamyarun /c2-cloud

The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised backdoors, just like accessing an EC2 instance in the AWS cloud. It can manage several simultaneous backdoor sessions with a user-friendly interface.

Psmths /reave

WIP Post-exploitation framework tailored for hypervisors.

kamalx06 /TornadoRevC2

Modular post-exploitation framework for authorised red-team work. Interactive reverse/bind shells over TCP/TLS/mTLS, plus a pull-based Go beacon with ECDSA-signed tasks and compile-time OPSEC profiles. One operator console, shared TLS, per-session logs.

Add3r /Proxy_Bypass

Command-line tool to identify useragents that bypasses proxy restrictions

ridpath /awinrm

Modern WinRM shell for red teams and CTFs with automated tool staging, AV bypass, recon, and credential/loot extraction

HackWidMaddy /DarkControl

A sophisticated PowerShell C2 client for remote command execution and reporting. It includes a Windows reverse shell payload generator and handler using the HTTPS protocol. The client polls a Python-based web server (REST API) for commands, executes them locally, and returns the results.

strikoder /windows-binaries

Curated collection of standalone Windows privilege escalation and enumeration binaries for OSCP, CTFs, and red team engagements. No compilation required.

StringManolo /nbmxbsf

General Purpouse Telegram Bot. Can act as a RAT, a Ransomware, a post exploitation tool, or just as a core to your custom bot.

ProjectZeroDays /NSA_TAO_EQUATIONGROUP_EQUATIONDRUG

Enterprise defensive reconstruction: PeddleCheap implant, LP wire protocol, RC5/AES crypto, EquationDrug plugin ABI, harness validated. v2.3.3 all pass.

redinpulse /RinP-xpc-framework

Red in Pulse post-exploitation tool maintains macOS persistence by leveraging a design weakness in Background Task Management (BTM). It creates a service that blends into the `launchd` lifecycle as a legitimate Apple component, enabling scheduled reconnection after session loss while reducing exposure to signature-based detection.

BrainFuzz-hub /PyPowRST

PyPowRST(short for "Pyhton Powered ReverseShell Tool")

flavioJoshua /sliver

Adversary Emulation Framework

flavioJoshua /Havoc

The Havoc Framework.

loneicewolf /koadic

Koadic C3 COM Command & Control - JScript RAT

lgcarmo /WPExploitation

Auxiliar a Coleta de Informação.