GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.

pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)

PHP shells that work on Linux OS, macOS, and Windows OS.

PowerShell scripts for communicating with a remote host.

Golang reverse/bind shell generator

Search for Unix binaries that can be exploited to bypass system security restrictions.

GodOfWar - Malicious Java WAR builder with built-in payloads

arbitrary TCP and UDP connections and listens (Netcat for Python).

List of payloads: reverse shell, bind shell, webshell.

JAR, Java, and JSP shells that work on Linux OS, macOS, and Windows OS.

Bind/Reverse Shells, SOCKS, etc over Tor in Golang

More bind and reverse shells! This time written in Rust.

Offline command line tool that searches for GTFOBins binaries that can be used to bypass local security restrictions in misconfigured systems.

Pty bind shell for golang 一款基于SSH协议的远控程序

Pseudo-shell for RCE scenarios: tunnels commands via /tmp sockets to a local daemon, keeps context, no bind or reverse shell needed.

Automatic reverse/bind shell generator cheat sheet.

Simple reverse and bind shells written in Go.

Remote command shell application written in C# targeting the .NET runtime.

-x-x-x- DO NOT RUN ON PRODUCTION MACHINE -x-x-x- LD_PRELOAD based user-land rootkit for Linux platform.

netcat-like CLI tool with advanced features for bind/reverse shells