
Veil
Veil 3.1.X (Check version info in Veil at runtime)
Shellcode generation, encoding, obfuscation, and testing frameworks.

Shellcode injection technique. Given as C++ header, standalone Rust program or library.

Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs

Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods

C-shellcode to hex converter, handy tool for paste & execute shellcodes in IDA PRO, gdb, windbg, radare2, ollydbg, x64dbg, immunity debugger & 010…

CVE-2023-2255 Libre Office

Native syscall shellcode injector using HellsGate/HalosGate/TartarusGate for undetectable execution, with external shellcode loading and EDR evasion…

Reverse backdoor written in PowerShell and obfuscated with Python. It generates payloads for popular hacking devices like Flipper Zero and Hak5 USB…


Go shellcode loader that combines multiple evasion techniques

This repository contains a python script that will handle the majority of the dompdf cached font exploit (CVE-2022-28368), all you need to do is…

A standalone DLL that exports databases in cleartext once injected in the KeePass process.


Linux ELF x32/x64 ASLR DEP/NX bypass exploit with stack-spraying

A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.html#dirty-vani…

A simple PoC to invoke an encrypted shellcode by using an hidden call

Shellcode loader demonstrating multiple execution techniques including direct syscalls, IAT evasion, encrypted payloads, PPID spoofing, and code…