{"adoption": {"forks": 327, "observed_at": "2026-08-28T04:05:11.572267+00:00", "stars": 1616}, "canonical_url": "https://ross.abutalabs.com/products/winpayloads", "card": {"archived": false, "artifact_type": "cli-tool", "description": "Undetectable Windows Payload Generation", "domain": ["security", "penetration-testing", "windows"], "enriched": true, "function": ["security", "penetration-testing"], "health_score": 20, "homepage": null, "language": "Python", "license": "Apache-2.0", "license_family": "permissive", "maturity": "maintenance", "member_repos": ["nccgroup/Winpayloads"], "name": "nccgroup/Winpayloads", "platform": ["cli"], "pushed_at": "2022-11-08T08:14:23+00:00", "repo": "nccgroup/Winpayloads", "stars": 1616, "tags": ["payload-generation", "antivirus-bypass", "metasploit", "powershell", "uac-bypass", "persistence", "red-team", "linux", "docker"], "topics": ["python", "persistence", "kali", "payloads", "bypass", "antivirus", "uac", "windows", "meter", "msfconsole", "metasploit", "powershell", "netsec", "undetectable"], "urls": [], "use_cases": ["generate undetectable windows payloads for penetration testing", "bypass antivirus detection on windows targets", "bypass uac on compromised windows machines", "add persistence to a payload that survives reboot", "invoke powershell payloads in memory with a stager", "spray psexec with stolen hashes across a network", "create custom shellcode payloads for red team engagements"], "what_it_is": "Winpayloads is a Python 2.7 tool for generating undetectable Windows payloads with extras like UAC bypass, persistence, and PowerShell stagers. It integrates with Metasploit and popular PowerShell post-exploitation scripts and is now primarily distributed via Docker.", "when_to_avoid": ["you need a maintained tool - it runs on deprecated Python 2.7 and development is stale", "you are not authorized to test the target systems - this is offensive tooling", "you need modern evasion against current EDR/AV, as detection rates have grown"], "when_to_choose": ["you are doing authorized penetration testing or red teaming against Windows targets", "you need payload generation with AV evasion, UAC bypass, and persistence in one tool", "you work from Kali Linux and already use Metasploit"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/winpayloads", "repo": "nccgroup/Winpayloads", "role": "main", "score": 32}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:05:11.572267+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T03:50:04.320173+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c346893d3b4bc297067113d563bc7de70cdfb76ef06dd8895aa2e0a8f78d3058", "fetched_at": "2026-08-28T04:05:11.572267+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nccgroup/Winpayloads"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:05:11.572267+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T03:50:04.320173+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c346893d3b4bc297067113d563bc7de70cdfb76ef06dd8895aa2e0a8f78d3058", "fetched_at": "2026-08-28T04:05:11.572267+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nccgroup/Winpayloads"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T03:50:04.320173+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c346893d3b4bc297067113d563bc7de70cdfb76ef06dd8895aa2e0a8f78d3058", "fetched_at": "2026-08-28T04:05:11.572267+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nccgroup/Winpayloads"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:05:11.572267+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:05:11.572267+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:05:11.572267+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T03:50:04.320173+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c346893d3b4bc297067113d563bc7de70cdfb76ef06dd8895aa2e0a8f78d3058", "fetched_at": "2026-08-28T04:05:11.572267+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nccgroup/Winpayloads"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:05:11.572267+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:05:11.572267+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T03:50:04.320173+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c346893d3b4bc297067113d563bc7de70cdfb76ef06dd8895aa2e0a8f78d3058", "fetched_at": "2026-08-28T04:05:11.572267+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nccgroup/Winpayloads"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:05:11.572267+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:05:11.572267+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:05:11.572267+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T03:50:04.320173+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c346893d3b4bc297067113d563bc7de70cdfb76ef06dd8895aa2e0a8f78d3058", "fetched_at": "2026-08-28T04:05:11.572267+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nccgroup/Winpayloads"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:05:11.572267+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:05:11.572267+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T03:50:04.320173+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c346893d3b4bc297067113d563bc7de70cdfb76ef06dd8895aa2e0a8f78d3058", "fetched_at": "2026-08-28T04:05:11.572267+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nccgroup/Winpayloads"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T03:50:04.320173+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c346893d3b4bc297067113d563bc7de70cdfb76ef06dd8895aa2e0a8f78d3058", "fetched_at": "2026-08-28T04:05:11.572267+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nccgroup/Winpayloads"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T03:50:04.320173+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c346893d3b4bc297067113d563bc7de70cdfb76ef06dd8895aa2e0a8f78d3058", "fetched_at": "2026-08-28T04:05:11.572267+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nccgroup/Winpayloads"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T03:50:04.320173+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c346893d3b4bc297067113d563bc7de70cdfb76ef06dd8895aa2e0a8f78d3058", "fetched_at": "2026-08-28T04:05:11.572267+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nccgroup/Winpayloads"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 0, "longevity": 100, "rhythm": 35}, "computed_at": "2026-09-02T17:46:02.011165+00:00", "flags": ["no_releases"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 3981, "days_push": 1394, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 32, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}