Exploitation of the PHP eval() function where user input is passed. This is a fork of a repo which now seems to have been deleted. I don't claim ownership on this content as clearly visible by the commit history.

complex webshell manager, quasi-http botnet. ?showtopic=88422

Slotbot is a complex webshell manager written in PHP, which operate on web-based back-doors implemented by user himself. Using prepared php back-doors, Slotbot will work as C&C trying to communicate with each back-doors. Tool goes beyond average web-shell managers, since it delivers useful functions for scanning, exploiting and so on. It is Slot…

an experimental linux kernel module (rootkit) with a keylogger and built-in IRC bot

php-cli vulnerability scanner

Wordpress File Uplaod Exploits

Network Attack Tool

random perl scripts that may be usefull [2007]

Minimal IRC connection that simply emits event objects. Plugin modules can do the rest.

[discontinued] Mass exploiter of CVE-2015-1579 for WordPress CMS

Advanced Controller/Server/Client Reverse Shell/Bot – Windows/Linux – Python

Vikingbot is yet another simple PHP based IRC bot with support for plugins and secure IRC servers. The bot requires Unix/Linux shell access with PHP support and SSL support in PHP for use against secure IRC servers.

Some handy scripts to collect hosts installed redis (using Shodan search engine) and exploit them

VIPROY - VoIP Pen-Test Kit for Metasploit Framework

Bot IRC and attack/defense system through SSH

A tool to generate media files with malicious metadata

Simple rsync-based backup tool for *nix servers.