RuoJi6/CACM

Health v2 · maintenance only

Adoption not part of the score

1121 stars · 123 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

CACM is a Linux post-exploitation and privilege persistence tool that bundles port scanning, sensitive information gathering, EDR/AV identification, process hiding, SSH connection spoofing, and multiple persistence techniques. It also preserves file timestamps during file operations to reduce forensic traces.

Use cases

• maintain persistence on a compromised linux host
• scan ports and collect sensitive info during post-exploitation
• identify EDR/AV processes on a target machine
• hide processes and spoof ssh connections
• scan docker environments for sensitive data
• clean shell history and restore file timestamps to avoid detection
• download tools like fscan in restricted network environments

When to choose

• you are doing authorized red team or penetration testing on linux targets
• you need an all-in-one post-exploitation toolkit with persistence techniques
• you want anti-forensic features like timestamp preservation and history cleanup

When to avoid

• you need a defensive or hardening tool - this is offensive-oriented
• you are on windows or macos - it targets linux
• you cannot legally or ethically use offensive security tooling

Facets

cli-tool · maturity active

security penetration-testing networking search-engine developer-tools security penetration-testing operating-systems cli privilege-persistence post-exploitation red-team edr-av-detection process-hiding ssh-persistence anti-forensics port-scanning command-line linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="RuoJi6/CACM")