#shell

Villain
sponsor
Villain

Backdoor generator and multi-session handler for sessions sharing among connected sibling servers.

hoaxshell
sponsor
hoaxshell

Windows reverse shell payload generator and handler that abuses the http(s) protocol.

Shells
sponsor
Shells

A script for generating common revshells fast and easily.

LFI Suite
featured
LFI Suite

Totally Automatic LFI Exploiter and Scanner.

fuxploider
fuxploider

File upload vulnerability scanner and exploitation tool.

HTSHELLS
HTSHELLS

Self contained web shells and other attacks via .htaccess files.

Shellcrypt
Shellcrypt

A QoL tool to obfuscate shellcode.

Sshimpanzee
Sshimpanzee

Reverse shell based on sshd supporting DNS and ICMP tunnelling as well as HTTP and Socks proxies.

HTTP-revshell
HTTP-revshell

Powershell reverse shell using HTTP/S protocol with AMSI bypass and Proxy Aware.

web2shell
web2shell

Automate converting webshells into reverse shells.

DripLoader
DripLoader

Evasive shellcode loader for bypassing injection detection.

Nishang
Nishang

Offensive PowerShell for red team, penetration testing and offensive security.

Hades
Hades

Go shellcode loader that combines multiple evasion techniques.

Freeze-rs
Freeze-rs

Payload toolkit for bypassing EDRs using suspended processes, direct syscalls written.

PyShell
PyShell

Multiplatform Python webshell.

PowerMeUp
PowerMeUp

A small library of powershell scripts for post exploitation that you may need or use!

Kraken
Kraken

A modular multi-language webshell.

Reverse Shell Generator
Reverse Shell Generator

A tool to generate various ways to do a reverse shell.

phpsploit
phpsploit

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor.

LAZYPARIAH
LAZYPARIAH

Generate reverse shell payloads on the fly.

PowerSploit
PowerSploit

A PowerShell Post-Exploitation Framework.

reDuh
reDuh

Create a TCP circuit through validly formed HTTP requests.

reGeorg
reGeorg

Pwn a bastion webserver and create SOCKS proxies through the DMZ.

weevely3
weevely3

Weaponized web shell.

ShellPop
ShellPop

Pop shells like a master.

Print-My-Shell
Print-My-Shell

Automate the process of generating various reverse shells.

pwncat
pwncat

Netcat on steroids with many extra features.

AutoSploit
AutoSploit

Automated Mass Exploiter.

BeRoot
BeRoot

Multiplaform privilege escalation project.

JSgen
JSgen

Generate javascript code to be injected in case you find a Server Side Javascript Injection.

Injectify
Injectify

Perform advanced MiTM attacks on websites with ease.

SiteBroker
SiteBroker

Utility for information gathering and penetration testing automation.

RevShells
RevShells

Hosted Reverse Shell generator with a ton of functionality.

Shelling
Shelling

A comprehensive OS command injection payload generator.

JSShell
JSShell

An interactive multi-user web JS shell.

Evil SQL Client
Evil SQL Client

Interactive .NET SQL console client with enhanced SQL Server discovery/access/exfiltration features.

Gopherus
Gopherus

Generates gopher link for exploiting SSRF and gaining RCE in various servers.