
TinyLoad
Open source Windows x64 PE packer and crypter. Compresses and encrypts executables with a custom virtual machine into a self extracting stub.

Open source Windows x64 PE packer and crypter. Compresses and encrypts executables with a custom virtual machine into a self extracting stub.

Run Radmin VPN on Linux via Wine — custom driver, TAP bridge, zero packet loss

Adaptix C2 agent using Crystal Palace PIC linker and PICO module system

Go-based Java serialization protocol analyzer that parses, dumps, and generates deserialization payloads with ysoserial gadget support and a library…

A PoC project for embedding shellcode to Hint/Name Table

ARM64 ELF Virtual Machine Protection System

Proof-of-concept for CVE-2025-27237: local privilege escalation in Zabbix Agent for Windows via OpenSSL configuration file hijacking, with PoC DLLs…

Converts Windows EXE files into DLLs that export the original entry point, enabling DLL-style loading of arbitrary executables. Supports both 32-bit…

Run Beacon Object Files (BOFs) outside Cobalt Strike by parsing 64-bit COFF object files, with Beacon-compatible argument generation and helper…

Some Rust program I wrote while learning Malware Development

🗜️ A packer for Windows x86 executable files written in C and Intel x86 Assembly. The new file after packing can obstruct reverse…

Generate proxy DLLs that forward exports to a target DLL while loading a user-defined secondary DLL, enabling DLL hijacking and side-loading for red…

Manipulates compiled executables (.exe/DLL) to evade EDRs by removing IoC strings, inflating file size, and cloning code-signing certificates for…

Generates Nim proxy DLLs for DLL sideloading: parses PE exports to create .def files, forwards legit calls, and executes custom payloads in red team…

PE loader with various shellcode injection techniques

ELF binary section docking toolkit for stageless payload delivery, enabling in-field payload attachment, signature evasion, and static/dynamic…

Proof-of-concept exploit and custom payload generator for CVE-2018-5146, including crafted OGG POC file and HTML-based exploit with CRC32 calculation…

An architecture-agnostic ELF file flattener for shellcode