MirageShell —— 如海市蜃楼般变幻无形、驻留无痕的 Shellcode 加载工具集。或许可以在OSEP中利用。 - RasAlGhul-1/MirageShell

Fritter is a heavily modified fork of TheWover and Odzhan's Donut shellcode generator. - 0xROOTPLS/Fritter

a minimal, position-independent C shellcode framework for Windows x64. compiles entirely on Linux - cocomelonc/tabby

Shellcode Loader for Master Thesis. Contribute to 0xRoam/LoadReload development by creating an account on GitHub.

Application in C that encodes and decodes shellcode obfuscated as IPv6 address strings at runtime and executes it in memory to evade static AV detection. - N-O-USER/IPv6-Decryption

Shellcode Generator. Contribute to n0bele/ShellcodeGenerator development by creating an account on GitHub.

Contribute to zyv2/x64-Position-Independent-Shellcode-with-API-Hashing development by creating an account on GitHub.

Evasion and payload crafting framework — AMSI bypass, AV evasion encoding, process injection, LOLBaS, shellcode staging, and EDR fingerprinting. - arkanzasfeziii/Ghost

一款用于CobaltStrike免杀的工具. Contribute to DaMaTou00/csLoader development by creating an account on GitHub.

Using steganography to hide Shellcode to bypass EDR detection - Evilearth-dotcom/Steganography-bypassing-EDR

Advanced OPSEC fork of Donut. Features a Custom in-memory CLR Host, Tail-Jump ETW bypasses, and zero-patch AMSI evasion for stealthy shellcode generation. - Zuigetzu/Donut-CustomHost

Small Rust toolkit for pulling shellcode out of a Windows PE and (optionally) executing it in-memory for quick validation. - 11philip22/extract-shellcode

AI AV Evasion Skill - Shellcode and Loader with IPv4 obfuscation, RC4 encryption, 9-layer anti-sandbox, ETW bypass, indirect syscall - bluechips-zhao/av-evasion-skills

AES Shellcode Loader . Contribute to bloggins/SHCloader development by creating an account on GitHub.

A EDR bypassing shellcode loader framework for Windows 10 64bit, featuring ETW/AMSI patching, Tartarus Gate, process protection and more - 0xjrx/magnetar

Contribute to tuananh244/-Shellcode-Labs development by creating an account on GitHub.

VBA macro chain demonstrating modern EDR-evasion techniques. OSEP-grade study artifact for Windows 11 24H2 + MDE. - noderaven/solid-macro