
libpeconv
Custom PE loading and manipulation library for manual mapping, IAT hooking, memory dumping, and rebuilding imports for malware analysis and reverse…

Custom PE loading and manipulation library for manual mapping, IAT hooking, memory dumping, and rebuilding imports for malware analysis and reverse…

Research code & papers from members of vx-underground.

Golang malware development library

some gadgets about windows process and ready to use :)

A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementing page…

PE loader with various shellcode injection techniques

Post-exploitation and evasion research toolkit for Linux.

Linux post-exploitation framework with a UEFI bootkit that persistently and stealthily loads a Rust-based kernel module rootkit on modern Linux…

C++ library to load DLLs directly from memory without touching disk, with exception handling support, enabling stealthy code execution and evasion of…

A Nim implementation of reflective PE-Loading from memory

A technique of hiding malicious shellcode via Shannon encoding.

NCC Group's analysis and exploitation of CVE-2017-8759 along with further refinements

Windows XP 32-Bit Bootkit

A .NET malware loader, using API-Hashing to evade static analysis

Lockbit3.0 Microsoft Defender MpClient.dll DLL Hijacking PoC

A utility to use the usermode shellcode from the DOUBLEPULSAR payload to reflectively load an arbitrary DLL into another process, for use in testing…

Local PE injection technique using hardware breakpoints and vectored exception handling to manipulate DLL loading and execute arbitrary payloads, as…

Some Rust program I wrote while learning Malware Development