#1Tools for crafting and manipulating low-level code executed after successful exploitation.
Kitploit recommended
silentisvox/syscallrevenantClean Indirect Syscalls with Syscall Tampering.
gmh5225/memory-relocallocC proof-of-concept that locates code caves in the .reloc section of mapped DLLs to allocate and execute small shellcode, replacing typical memory…
woldann/exoprocCross-process instrumentation for Windows x64 in TypeScript — hook functions, redirect threads, and read/write memory in another process, with no DLL…
twosevenonet/injectsetconsoleProof of Concept for Process Code Injection Without Using WriteProcessMemory
sk4r4b/ntdll-reconstructionA technique that mixes NTDLL unhooking and hellsgate gate varients
aethervm/aethervmLLVM-native binary analysis and emulation platform that lifts AArch64 and x86_64 machine code to LLVM IR for instrumentation, deobfuscation, and…
bignerd95/chimay-redWorking POC of Mikrotik exploit from Vault 7 CIA Leaks
linnemanlabs/glimmerAdversary emulation and C2 framework for security research
rapid7/metasploit-payloadsUnified repository for different Metasploit Framework payloads
hfiref0x/kduWindows kernel driver utility that abuses vulnerable signed drivers (BYOVD) to bypass DSE, load unsigned drivers, hijack protected processes, and…
trustedsec/lazzzy_dumpStatically extracts and decrypts AES-CBC/XOR-obfuscated shellcode from laZzzy-wrapped PE binaries via signature matching and RIP-relative address…
x3r0day/fud-c2-frameworkA fileless reverse shell and C2 framework leveraging direct syscalls, proxy tunneling, and ChaCha20 encryption for AV evasion.
gmh5225/icall-gadgetExploit for redirecting control flow of a legit kernel module to your own illegitimate kernel module to evade anti-cheats stack walking
ntfargo/relapse-exploitPS5 exploit chain for firmware 7.00-13.60 combining a WebKit JSC info leak and typedarray corruption with an aio_multi_wait UAF race for kernel…
jazho76/house_of_apple_2Interactive GDB walkthrough of the House of Apple 2 FSOP technique on glibc 2.43, with a reproducible sandbox covering vtable bypass, stack pivoting,…
dovelus/polychrome-rsA PoC on how to use a Compute Shader as Payload
sneakynachos/cve-2026-87575-cve-2026-87606-cve-2026-87491-and-cve-2026-85046.-escape-the-v8-carcass.Chained Chrome V8 renderer escape proof-of-concept exploiting four CVEs: Float64Array corruption, Wasm overwrite, popup navigation retargeting, and…
racoten/reflectivepluginloaderReflective PE mapper and evasion-hardened module stomping engine for Windows x64
