Darren Martyn

python-pty-shells. Python PTY backdoors - full PTY or nothing!

python-dll-injection. Python toolkit for injecting DLL files into running processes on Windows

exploits. Some exploits and exploit development stuff.

tsh-sctp. TinySHell port to SCTP

web-exploitation-engine. Generic Command Exploitation Engine for exploiting web application command-injection bugs,.

fimap-aeshttp. Fimap post-exploitation plugin that injects dave Rel1k's AES HTTP Reverse Shell

weevils. Fimap post-exploitation plugin that injects Weevely as a persistent PHP backdoor on the target server

vaporware. The most amazing project ever that will fix security problems forever! All of security is fixed now! We can pack up and go home! Defends against all viruses, hackers, malware, and even stupid users!

ICMP-Chat. P2P ICMP-based Chat Client

DendroidSource. This is an updated version of Dendroid with a working panel & APK, I hope that everyone enjoys this download.

LANs.py. Capture and inject traffic on LAN

php-eval-shell. Quick and dirty project testing out eval() based PHP backdoors for research. Nothing special for now.

Weevely. Stealth tiny web shell

pwnginx. Pwn nginx - a nginx backdoor offering shell access, socks5 tunneling, http password sniffing.

fimap-uploader. Fimap Upload-File plugin for uploading anything ever, like a PHP backdoor or something like that. Written on request, needs work

ufonet. UFONet - is a shell client designed to launch DDoS attacks against a target, using CSRF/XSS vectors on third party web applications, like botnet. It allows to use a proxy to manage 'zombies'.

sqlmap. Automatic SQL injection and database takeover tool

tekmu. The Evil Karmetasploit Upgrade - Development for MSF4

Beleth. Multi-threaded SSH Password Auditor

phpkit. PHP Backdooring framework using include() and php://input to execute code.

rathole. RatHole is a unix backdoor which compiles cleanly on standard linux and openbsd (probably other bsd flavours also) without addicional libraries. It features blowfish encryption, process name hiding and definition of a prefered shell.

dmca. Repository with text of DMCA takedown notices as received. GitHub does not endorse or adopt any assertion contained in the following notices. Users identified in the notices are presumed innocent until proven guilty. Additional information about our DMCA policy can be found at

clusterd. application server attack toolkit

libpywebhack. Python

QuickSploit. Small script to exploit windows boxes quickly.

mofo. Metasploit Over Firewire Ownage

Yoshimi-Botnet. PoC Android smart phone botnet

mickey. python based backdoor software

tsh-original. Original tsh code, on which my sctp port is based

zarp. Network Attack Tool

xsssniper. An automatic XSS discovery tool

php-findsock. Some experiments with PHP and socket stealing thanks to lolchina

musicalpackets. JavaScript

Palioxis. Linux self-destruction utility

pyKeylogger. python client/server keystroke logger

ARPwner. Python