Pentest · Web shells and C2 frameworks

Web shells and C2 frameworks

• beefproject/beef on GitHub, opens in a new tab

  11Kstars

  Command and control server for delivering exploits to commandeered Web browsers.

  JavaScript·active·3 hours ago

• Ne0nd0g/merlin on GitHub, opens in a new tab

  5.6Kstars

  Cross-platform post-exploitation HTTP/2 Command and Control server and agent written in Golang.

  Go·GNU General Public License v3.0·slowing·last year

• epinna/weevely3 on GitHub, opens in a new tab

  3.5Kstars

  Weaponized PHP-based web shell.

  Python·GNU General Public License v3.0·steady·11 months ago

• nil0x42/phpsploit on GitHub, opens in a new tab

  2.5Kstars

  Full-featured C2 framework which silently persists on webserver via evil PHP oneliner.

  Python·GNU General Public License v3.0·slowing·2 years ago

• lukechilds/reverse-shell on GitHub, opens in a new tab

  2.1Kstars

  Easy to remember reverse shell that should work on most Unix-like systems.

  Go·MIT License·steady·6 months ago

• antonioCoco/SharPyShell on GitHub, opens in a new tab

  1.1Kstars

  Tiny and obfuscated ASP.NET webshell for C# web applications.

  Python·GNU General Public License v3.0·slowing·3 years ago

• dotcppfile/DAws on GitHub, opens in a new tab

  581stars

  Advanced Web shell.

  PHP·MIT License·dormant·9 years ago