#1Tools for crafting and manipulating low-level code executed after successful exploitation.
Kitploit recommended
hasherezade/libpeconvCustom PE loading and manipulation library for manual mapping, IAT hooking, memory dumping, and rebuilding imports for malware analysis and reverse…
gmh5225/anti_suspendProtect process by shellcode
sneakynachos/cve-2026-2764-but-with-wasmProof-of-concept exploit chain for Firefox JIT CVE-2026-2764, chaining JIT miscompilation and use-after-free into arbitrary read/write and WASM…
sneakynachos/cve-2026-2766-but-with-wasmCVE-2026-2766, but with wasm
sneakynachos/cve-2024-29943-but-with-wasmCVE-2024-29943, but with wasm
yzddmr6/java-shellcode-loader基于Java实现的Shellcode加载器
solomonsklash/sleepycryptA shellcode function to encrypt a running process image when sleeping.
bc-security/empireEmpire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
therealdreg/nasm_linux_x86_64_pure_sharedlibNASM Linux x86_64 pure (no deps) shared library (.so), POC for Reflective ELF SO injection
winterknife/pinkpantherWindows x64 handcrafted token stealing kernel-mode shellcode
choisg/onedriveupdatersideloadingPayload for DLL sideloading of the OneDriveUpdater.exe, based on the PaloAltoNetwork Unit42's blog post
codewhitesec/lastenzugSocks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level
techryptic/pokemon-shellcode-loaderTired of looking at hex all day and popping '\x41's? Rather look at Lugia/Charmander? I have the solution for you.
daem0nc0re/tangledwinexecPoCs and tools for investigation of Windows process execution techniques
iilegacyyii/shellcryptA QoL tool to obfuscate shellcode. In the future will be able to chain encoding/encryption/compression methods.
secforce/sharpwhispersC# porting of SysWhispers2. It uses SharpASM to find the code caves for executing the system call stub.
s3cur3th1ssh1t/nimshellcodefluctuationShellcodeFluctuation PoC ported to Nim
