Shellcode

ntdallas/bof_executeassembly

Beacon Object File for Cobalt Strike that executes .NET assemblies in beacon with evasion techniques.

gamozolabs/elfloader

An architecture-agnostic ELF file flattener for shellcode

nullsecuritynet/tools

Curated collection of security tools, exploits, proof-of-concept code, shellcodes, and scripts for penetration testing and educational offensive…

ntdallas/bof_runpe

BOF to run PE in Cobalt Strike Beacon without console creation

florylsk/execit

Execute shellcode files with rundll32

adamsvoboda/nim-loader

WIP shellcode loader in nim with EDR evasion techniques

bw3ll/rop_rocket

ROP ROCKET is an advanced code-reuse attack framework, with extensive ROP chain generation capabilities, including for novel Windows Syscalls attack,…

hacksysteam/cve-2022-28672

Foxit PDF Reader Remote Code Execution Exploit

nodiuus/nocturne

A bin2bin code virtualizer for x86-64 PE's

gh0x0st/invoke-psobfuscation

An in-depth approach to obfuscating the individual components of a PowerShell payload whether you're on Windows or Kali Linux.

n00py/hwacha

Deploy payloads to *Nix systems en masse

x-3306/project-onyx

Advanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advanced evasion…

iamsopotatoe-coder/tinyload

Open source Windows x64 PE packer and crypter. Compresses and encrypts executables with a custom virtual machine into a self extracting stub.

iss4cf0ng/duplexspycs

An open-source, C#-based remote administration tool (RAT), enabling complete control of a remote Windows machine, designed for legitimate remote…

saelo/cve-2018-4233

Exploit for CVE-2018-4233, a WebKit JIT optimization bug used during Pwn2Own 2018

jm00nj/phantom-evasion-loader

x64 Assembly injection engine using SROP and Zero-Copy Injection to bypass EDR/XDR and kernel monitors. Delivers XOR-encrypted payloads with minimal…