#1Tools for crafting and manipulating low-level code executed after successful exploitation.
Kitploit recommended

Apply a divide and conquer approach to bypass EDRs

RCE exploit for CVE-2023-3519

KittyStager is a simple stage 0 C2. It is made of a web server to host the shellcode and an implant, called kitten. The purpose of this project is to…

A multi-arch assembly REPL and emulator for your command line.

Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.

A simple ptrace-less shared library injector for x64 Linux

This tool is used for encrypt backdoor,shellcode,socks5 proxy generation,Information retrieval and POC arrangement for various architecture devices

The program is designed to obfuscate the shellcode.

Java-based exploit for CVE-2022-26134 that injects a Godzilla webshell into Confluence servers, enabling remote code execution with password and key…

Dynamically extracts fresh syscall stubs from ntdll.dll to evade signature-based detection, with a shellcode execution template for Nim-based…

Simple executable generator with encrypted shellcode.

micr0shell is a Python script that dynamically generates Windows X64 PIC Null-Free reverse shell shellcode.

CVE-2019-0708-EXP-Windows版单文件exe版,运行后直接在当前控制台反弹System权限Shell


NyxInvoke is a Rust CLI tool for running .NET assemblies, PowerShell, and BOFs with Patchless AMSI and ETW bypass features. with Dual-build support

Forth-based compiler deployed as position-independent x86_64 shellcode, providing a remote code execution agent with interactive REPL over TCP, HTTP,…

Socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level

Remote DLL Injection with Timer-based Shellcode Execution