A curated, searchable index of hands-on CTF labs covering binary mitigations, stack overflows, ROP chain construction, heap exploitation, format string bugs, shellcode development, and malware reve...

Find code injected into running Windows processes: reflective DLLs, shellcode threads, process hollowing, inline & IAT hooks, module stomping. Read-only, zero dependencies. - njuj/ghost-hunter

Hypervisor isolated shellcode execution environment. Maps host process memory into a guest vCPU, intercepts DLL execute faults, and proxies API calls to the host, Stardust PIC shellcode compatible ...

This is the another version of Shellcode Loader where I encoded the URL using XOR single byte and it mostly performs signature based evasion and sometimes Full Windows Antivirus Evasion too. - agha...

An unrestricted shellcode compiler for c/c++ based on llvm - Laster-dev/MemLLVM

Alma Evader takes raw shellcode (from any C2 framework) and produces a fully self-contained Windows DLL or EXE - Almavj/Alma_evader

Multi-architecture shellcode emitter with typed IR, bad-character encoding, and debugger-ready harnesses. Currently targeting x86 Windows. - rogdooley/emitrion

DevaPath - x64 Windows PIC shellcode framework that resolves DLL modules and functions without PEB→Ldr walking. Uses Thread Entry Point stack scanning + MZ backward walk for module discovery, with ...

Static analysis of a malicious RTF document: hidden exploit object, shellcode emulation and the dropper's download chain. - Fynnesse/Malware-Analysis-w-REMnux-Lab

A basic tool to inject shellcode into a remote process - dilipk5/shellcode-injector