n1nj4sec/pupy

Health v2 · maintenance only

Flags: no_releases archived no_license

Adoption not part of the score

8999 stars · 1857 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Pupy is an open-source, cross-platform (Windows, Linux, macOS, Android) command-and-control and post-exploitation framework written in Python and C. It emphasizes all-in-memory execution with a low footprint, supporting modular transports, reflective process injection, and remote loading of Python code and C extensions from memory.

Use cases

• run a cross-platform C2 server for red team operations
• generate reverse shell payloads for Windows, Linux, macOS, and Android
• execute post-exploitation modules on compromised hosts
• migrate a payload into another process via reflective injection
• open interactive remote shells with a real tty
• exfiltrate data over stacked encrypted transports like HTTP over AES over XOR
• load remote Python packages and C extensions entirely from memory

When to choose

• you need a multi-OS C2 framework with in-memory execution and low disk footprint
• you want stackable, modular communication transports including obfsproxy pluggable transports
• you prefer an extensible Python-based framework where modules are easy to write
• you need interactive remote shells and remote Python object access via rpyc

When to avoid

• you need a fully supported, actively developed tool with a clear license for production use
• you want a simple remote administration tool for legitimate fleet management rather than offensive security
• your environment prohibits dual-use offensive security tooling
• you need a lightweight one-off reverse shell rather than a full C2 framework

Facets

framework · maturity maintenance

security penetration-testing rpc cli security penetration-testing developer-tools python windows cross-platform cli c2 post-exploitation rat remote-access reverse-shell red-team payload-generation reflective-injection in-memory-execution linux macos android

Member repositories

For agents

markdown · JSON · MCP: product_card(name="n1nj4sec/pupy")