Adversary emulation toolkit — implants, payload generators, C2 infrastructure, phishing frameworks, disk imagers, kill switches, and assembly-level shellcode experiments. - cwill-telecom/Red-Cell

chacha20 Shellcode Loader. Contribute to bloggins/chacha20-Shellcode-Loader development by creating an account on GitHub.

VampSecure Labs — Laboratorio shellcode ARM64: mmap RWX, syscalls directas y ejecucion de codigo nativo - belky-me/vamp-shellcode-lab

x64 PIC shellcode that enable chrome CDP in-memory and extract/exfiltrate cookies - Nuf1p/RepentanceStealer

AES-256-CBC shellcode loader with Hell's Gate direct syscalls and Early Bird APC injection - darkness215/darkcrypt

RISC-V VM based shellcode loader PoC - Still WIP. Contribute to Whispergate/JanusLoader development by creating an account on GitHub.

VampSecure Labs — Laboratorio shellcode ARM64: mmap RWX, syscalls directas y ejecucion de codigo nativo - Vampsecure-Labs/vamp-shellcode-lab

Contribute to nostdlib/CSharpShellcodeInjector development by creating an account on GitHub.

Turn a Microsoft-signed binary into a red team implant — no admin rights, no custom signing. ClickOnce delivery via AppDomainManager hijack with shellcode execution, file drop, reverse SSH + SOCKS5...

Static + dynamic analysis of a Cobalt Strike beacon loader: PE structure, Ghidra disassembly, x64dbg shellcode tracing, Wireshark C2 capture, and YARA detection rules. - jaloliddin-sec/malware-anal...

P3 (Process Parameter Poisoning) - Windows shellcode loader via CreateProcessW params + NtSetContextThread (EDR evasion research) - HackSpeak/p3-loader

claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a s...

Cerberus Shell - Linux-based shellcode execution framework for authorized security testing. Features polymorphic/encrypted payload generation, anti-debug evasion, sandbox detection, and persistence...