Dual Use

ProxyChains-ng

C

Dual UseFeatured

Force any TCP connection through SOCKS4/5 or HTTP proxies. Chain multiple proxies for anonymity.

Socat

C

Dual Use

Multipurpose relay tool. Bidirectional data transfer between two data channels — sockets, files, pipes, devices.

ngrok

Go

Dual UseFeatured

Expose local servers to the internet via secure tunnels. Instant public URLs for localhost services.

Rclone

Go

Dual UseFeatured

rsync for cloud storage. Sync, copy, and mount 70+ cloud providers. Command-line Swiss army knife for cloud data.

GTFOBins

Shell

Dual UseFeatured

Curated list of Unix binaries that can be used to bypass security restrictions. Living off the land, documented.

LOLBAS

Shell

Dual UseFeatured

Living Off The Land Binaries, Scripts and Libraries for Windows. Documenting every Windows binary with offensive potential.

Sysinternals Suite

C/C++

Dual UseFeatured

Microsoft's advanced system utilities. PsExec, Process Monitor, Autoruns, TCPView — essential for both ops and offense.

Empire

Python

Dual UseFeatured

Post-exploitation agent built on PowerShell and Python. Cryptologically-secure communications and flexible architecture.

Tor

C

Dual UseFeatured

Anonymous communication network. Routes traffic through multiple relays to conceal location and usage.

OpenSSH

C

Dual Use

The SSH protocol implementation. Remote access, tunneling, port forwarding, SOCKS proxying — everywhere.

NetExec

Python

Dual UseFeatured

Network execution tool — the maintained successor to CrackMapExec. SMB, LDAP, WinRM, SSH, MSSQL, and more.

CobaltStrike Parser

Python

Dual Use

Parse and extract configs from Cobalt Strike beacons. Identify C2 servers, watermarks, and malleable C2 profiles.

PowerSploit

PowerShell

Dual Use

Collection of PowerShell post-exploitation modules. Credential theft, privilege escalation, persistence, exfiltration.

Nishang

PowerShell

Dual Use

PowerShell offensive security framework. Shells, backdoors, information gathering, and privilege escalation.

dnscat2

Ruby

Dual UseFeatured

Create an encrypted C2 channel over DNS. Tunnel data through DNS queries when all other protocols are blocked.