#1Tools for crafting and manipulating low-level code executed after successful exploitation.
Kitploit recommended

Shellcode loader demonstrating multiple execution techniques including direct syscalls, IAT evasion, encrypted payloads, PPID spoofing, and code…

A simple shell code encryptor/decryptor/executor to bypass anti virus.

Pure Rust x86 hardware emulator and Windows process simulator for malware analysis, shellcode emulation, and payload unpacking. Supports 32/64-bit PE…

SHAREM is a shellcode analysis framework, capable of emulating more than 45,000 WinAPIs and virutally all Windows syscalls. It also contains its own…

A Fully Undetectable C2 Server That Communicates Via Google SMTP to evade Antivirus Protections and Network Traffic Restrictions

Script for generating revshells

C# implementations of shellcode injection techniques including classic injection, thread hijacking, process hollowing, and atom bombing, using…

Nim-based assembly packer and shellcode loader for opsec & profit


Yet another shellcode runner consists of different techniques for evaluating detection capabilities of endpoint security solutions

A small, null-free Windows shellcode that executes calc.exe (x86/x64, all OS/SPs)

exploitdb // The official Exploit-Database repository

complex webshell manager, quasi-http botnet.

PE loader with various shellcode injection techniques

Compromising the macOS Kernel through Safari by Chaining Six Vulnerabilities

Cobalt Strike BOF that spawns a sacrificial process, injects it with shellcode, and executes payload. Built to evade EDR/UserLand hooks by spawning…

Cross-platform C2 agent for Mythic with dynamic function loading, SOCKS5 proxy, file operations, shellcode injection, and macOS/Windows…