This contains a number of shell functions that may be of use. The intention is for the root of this repository to be cloned to an area in a user's home directory. Then `shellFunctionSetup.s...

Collection of remote shellcode Loaders using Early Bird APC injection, direct/indirect syscalls, ntdll and low level utilities, undetected by Windows Defender and BitDefender - Hue-Jhan/Syscall-Ear...

Collection of remote shellcode Loaders using APCs, direct/indirect syscalls, ntdll and low level utilities, undetected by Windows Defender and BitDefender - Hue-Jhan/Syscall-Apc-Injection-Trojans

This report details a digital forensic investigation of a fileless malware attack initiated by a compromised USB device. The analysis reconstructs a multi-stage execution chain (VBS, BAT, and Pytho...

An advanced, all-in-one operational security (OPSEC) framework for Linux and WSL. Features transparent Tor routing, MAC spoofing, RAM wiping, and anti-MITM defenses.The ultimate Bash utility for et...

Shellcode loader generator with ECL/RSA encryption, Callback/x64/x86 modes, and embedded web UI - Felix3322/0xL0ADER

Tool for shellcode injection. Contribute to 0xB0y426/DemonProcess development by creating an account on GitHub.

Crystal Palace PICO implementation of Process Parameter Poisoning (P³) — null-free shellcode injection via CreateProcessW parameter fields without VirtualAllocEx or WriteProcessMemory. - joaovarela...

Erebus is an Initial Access wrapper for the Mythic Command & Control Server. It converts shellcode into payloads specifically used for phishing and IA operations. - N3m3s1sGr0up/Erebus

Reverse engineering analysis of Python shellcode that injects into AnyDesk via APC injection and attempts to connect to a C2 server through AnyDesk. The shellcode was observed to use AES and RSA en...

A minimal Windows shellcode runner written in Go - loads base64 shellcode from disk or a remote URL, decodes it in memory, and executes it via VirtualAlloc + CreateThread. For authorized pentests ...

A minimal Windows shellcode runner written in Go - loads base64 shellcode from disk or a remote URL, decodes it in memory, and executes it via VirtualAlloc + CreateThread. For authorized pentests ...

Pure Go x64 Windows library-to-shellcode generator derived from Fritter - sliverarmory/churro

GTLibc is library to make game trainer in c/c++ it provide all the necessary methods to make simple game trainer in windows using win32-API with ease. - heaven-hm/gtlibc

An advanced in-memory evasion technique fluctuating shellcode's memory protection between RW/NoAccess & RX and then encrypting/decrypting its contents, i only rewrite in c to be com...

This project leverages the legitimate "Netsh Helper DLL" functionality in Windows to execute malicious code (shellcode) within the context of the trusted netsh.exe process. Ideal ...

gomulti_loader shellcode in windows and linux. Contribute to grisuno/gomulti_loader development by creating an account on GitHub.

cgoblin run shellcode from an url in windows and linux - grisuno/cgoblin

most simple shellcode execution in CGO. Contribute to grisuno/ejecutarShellcode development by creating an account on GitHub.