# n1nj4sec/pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

Repository: https://github.com/n1nj4sec/pupy
Canonical: https://ross.abutalabs.com/products/pupy
Language: Python
License: NOASSERTION
License Family: other
Topics: pupy, python, remote-access, post-exploitation, pentesting, windows, linux, android, rat, shell, reverse-shell, reflective-injection, backdoor, payload, meterpreter, remote-admin-tool, mac-os
Archived: true
Last push: 2024-03-22T08:52:53+00:00

## Health v2 (maintenance only)
Score: 10/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 3999, "days_push": 894, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases, archived, no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 8999, forks 1857 (observed 2026-08-28T04:10:26.722933+00:00)

## What it is
Pupy is an open-source, cross-platform (Windows, Linux, macOS, Android) command-and-control and post-exploitation framework written in Python and C. It emphasizes all-in-memory execution with a low footprint, supporting modular transports, reflective process injection, and remote loading of Python code and C extensions from memory.

## Use cases
- run a cross-platform C2 server for red team operations
- generate reverse shell payloads for Windows, Linux, macOS, and Android
- execute post-exploitation modules on compromised hosts
- migrate a payload into another process via reflective injection
- open interactive remote shells with a real tty
- exfiltrate data over stacked encrypted transports like HTTP over AES over XOR
- load remote Python packages and C extensions entirely from memory

## When to choose
- you need a multi-OS C2 framework with in-memory execution and low disk footprint
- you want stackable, modular communication transports including obfsproxy pluggable transports
- you prefer an extensible Python-based framework where modules are easy to write
- you need interactive remote shells and remote Python object access via rpyc

## When to avoid
- you need a fully supported, actively developed tool with a clear license for production use
- you want a simple remote administration tool for legitimate fleet management rather than offensive security
- your environment prohibits dual-use offensive security tooling
- you need a lightweight one-off reverse shell rather than a full C2 framework

## Facets
- artifact type: framework
- maturity: maintenance
- function: security, penetration-testing, rpc, cli
- domain: security, penetration-testing, developer-tools
- platform: python, windows, cross-platform, cli
- tags: c2, post-exploitation, rat, remote-access, reverse-shell, red-team, payload-generation, reflective-injection, in-memory-execution, linux, macos, android

## Member repositories
- n1nj4sec/pupy (main) score 10

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:10:26.722933+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T17:24:21.738029+00:00, confidence not recorded.
  - readme: https://github.com/n1nj4sec/pupy (fetched 2026-08-28T04:10:26.722933+00:00, sha 864fec1f2144)
- Data as of 2026-08-30T08:39:29.467469+00:00.