https://github.com/s-r-e-e-r-a-j/ghostbuilder
GhostBuilder is a powerful payload generator tool designed for ethical hacking, red-teaming, penetration testing, and security research
https://github.com/s-r-e-e-r-a-j/ghostbuilder
arch-linux debian ethical-hacking ethical-hacking-tools kali-linux linux penetration-testing-tools pentest-tool pentest-tools pentesting pentration-testing red-team-tools red-teaming rhel security-research
Last synced: about 1 month ago
JSON representation
GhostBuilder is a powerful payload generator tool designed for ethical hacking, red-teaming, penetration testing, and security research
- Host: GitHub
- URL: https://github.com/s-r-e-e-r-a-j/ghostbuilder
- Owner: s-r-e-e-r-a-j
- License: gpl-3.0
- Created: 2025-11-03T17:48:41.000Z (8 months ago)
- Default Branch: main
- Last Pushed: 2026-04-12T09:27:22.000Z (2 months ago)
- Last Synced: 2026-04-12T10:23:30.726Z (2 months ago)
- Topics: arch-linux, debian, ethical-hacking, ethical-hacking-tools, kali-linux, linux, penetration-testing-tools, pentest-tool, pentest-tools, pentesting, pentration-testing, red-team-tools, red-teaming, rhel, security-research
- Language: Python
- Homepage:
- Size: 92.8 KB
- Stars: 20
- Watchers: 0
- Forks: 3
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE.md
Awesome Lists containing this project
README
## GhostBuilder
**GhostBuilder** is a powerful payload‑generation tool for creating Android, Windows, Linux, macOS, iOS, and other types of payloads using **Metasploit**.
It can also inject payloads into existing APK files and sign them automatically.
It’s designed for **ethical hacking**, **penetration testing**, and **security research** — not for illegal use.
## Features
- Create payloads for Android, Windows, Linux, macOS, and iOS
- Supports Unix, PHP, Ruby, ASPX, JSP, PowerShell, Perl, Node.js, Java, Python, and Bash payloads.
- Encoder selection (for supported payloads)
- Automatic bad character handling
- Inject payloads into real APKs
- Auto-install and check missing dependencies
- Sign and zipalign Android APKs
- Simple menu-based interface
## Disclaimer
GhostBuilder is provided **strictly** for lawful, authorized security work — including learning, research, penetration testing, and red-teaming — performed only on systems you own or for which you have **explicit written permission**. Any use of this project to access, modify, damage, or interfere with systems, networks, data, or services without explicit authorization is **strictly prohibited** and may be a criminal offense.
By downloading or using GhostBuilder you acknowledge and agree that you are solely responsible for complying with all applicable laws and for securing any required permissions before testing. The author **expressly disclaim all liability** for any misuse, loss, damage, or legal claims arising from use or misuse of this software. If you do not accept these terms, do not download, run, or distribute this software.
## Compatibility
- Linux (Debian, RHEL, Arch)
## Requirements
Ensure that Python version `3.10` or higher is installed on your system.
GhostBuilder needs the following tools:
- `msfvenom`
- `msfconsole`
- `apktool`
- `zipalign`
- `jarsigner`
- `keytool`
- `aapt`
- `apksigner`
If any are missing, GhostBuilder can install them automatically.
If automatic installation of a specific dependency failed, install it manually.
## Installation
1. **Clone the repository:**
```bash
git clone https://github.com/s-r-e-e-r-a-j/GhostBuilder.git
```
2. **Navigate to the GhostBuilder directory:**
```bash
cd GhostBuilder
```
3. **Give execute permission to the `run.sh` script:**
```bash
chmod +x run.sh
```
## Usage
Run the tool:
```bash
./run.sh
```
Then select an option from the menu:
```bash
[1] Android -> Normal APK
[2] Android -> Inject into original APK
[3] Windows payload
[4] Linux payload
[5] macOS payload
[6] iOS payload
[7] Re-check dependencies
[8] Other payloads (PowerShell, Unix, Python, PHP, Ruby, Java, ASPX, JSP, Perl, NodeJS, Bash)
[9] Exit
```
GhostBuilder will guide you step by step — just enter:
- LHOST (your IP)
- LPORT (port number)
- Output file name
- Dry run? (y/N):
- `y` (dry run): the tool only shows what it would do (preview). No files are created or changed.
- `n`: the tool performs the real actions and writes files.
- Encoder selection (for supported payloads)
- Bad characters (optional)
You can also sign the APK automatically after building.
## Signing, Zipalign
**Sign & zipalign? (y/N):**
If you choose `y`, the tool will sign the APK (add a digital certificate) and run zipalign so the APK is ready for installation. If you choose `n`, the APK will not be signed and may not install on some devices.
**Final name:**
The file name you want for the finished APK (for example `final.apk`). This is the signed and aligned file the user will install.
**Enter keystore password / Re-enter new password:**
A keystore is a protected file that holds the signing key. You must enter a password to create it and confirm it. You will need this password again later to sign APKs with that keystore.
**These questions appear when creating a new keystore. They collect identity information for the signing certificate:**
- **What is your first and last name:** your name or organization name
- **What is the name of your organizational unit:** team or department (optional)
- **What is the name of your organization:** company or group name (optional)
- **What is the name of your City or Locality:** your city name (optional)
- **What is the name of your State or Province:** your state or region name
- **What is the two-letter country code for this unit:** country code (e.g., `us`, `in`)
> They are just informational fields inside the signing certificate (CN, OU, O, L, ST, C). Java’s keytool does not verify the truth of the values you type — you can use real data or fake text.
**Confirmation (Is CN=..., OU=..., etc. correct?):**
Keytool shows what you entered and asks you to confirm. Answer `yes` if it looks correct.
**Enter Passphrase for keystore:**
Used again when signing the APK to confirm your keystore password (the same password you entered in the Enter keystore password / Re-enter new password field).
## License
This project is licensed under the GNU General Public License v3.0