Pupy

Pupy is an open-source, cross-platform command and control (C2) framework and remote administration tool written in Python and C, supporting Windows, Linux, macOS, and Android targets. It operates entirely in-memory using reflective injection techniques, leaving minimal forensic footprint on compromised systems while providing a comprehensive post-exploitation toolkit. Red team operators and penetration testers use Pupy for persistent access, lateral movement, credential harvesting, and data exfiltration during authorized engagements. Its modular architecture supports custom transport protocols, encrypted communications, and a wide range of post-exploitation modules including keylogging, screenshot capture, webcam access, and privilege escalation.