
elfpack
ELF binary section docking toolkit for stageless payload delivery, enabling in-field payload attachment, signature evasion, and static/dynamic…

ELF binary section docking toolkit for stageless payload delivery, enabling in-field payload attachment, signature evasion, and static/dynamic…

Proxies sensitive API calls from shellcode to artifacts for CET-compatible clean call stacks, enabling stealthy payload execution and call stack…

PE loader with various shellcode injection techniques

Exploiting the .lnk vulnerability and operating system handling mechanisms regarding explorer.exe and USB drives.

notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)

LoadLibrary for offensive operations

PoC Implementation of a fully dynamic call stack spoofer

Run Beacon Object Files (BOFs) outside Cobalt Strike by parsing 64-bit COFF object files, with Beacon-compatible argument generation and helper…

A .NET malware loader, using API-Hashing to evade static analysis

A PoC project for embedding shellcode to Hint/Name Table

Some Rust program I wrote while learning Malware Development

DLL sideloading/proxying with Nim!

Automated scanner for discovering DLL search order hijacking candidates in Windows executables, featuring import table parsing, runtime module…

An application to test windows and linux shellcodes

Create Anti-Copy DRM Malware

Get your data from the resource section manually, with no need for windows apis

Lightweight library which allows the ability to map both native and managed assemblies into memory by either using process injection of a process…

A small tool I made to dump the export table of PE files. The primary use case was intended for use within DLL proxying.