PE-Obfuscator
saadahla/pe-obfuscatorPE obfuscator with Evasion in mind
adversarial-attackexploitationpayload-development+2
saadahla/pe-obfuscatorPE obfuscator with Evasion in mind
s3cur3th1ssh1t/nimsyscallpackerPacks C# assemblies, PE files, or shellcode into encrypted Nim binaries with advanced evasion features including AMSI/ETW bypass, sandbox detection,…
blacksnufkin/nyxinvokeNyxInvoke is a Rust CLI tool for running .NET assemblies, PowerShell, and BOFs with Patchless AMSI and ETW bypass features. with Dual-build support
egebalci/amberReflective PE packer.
powershellmafia/powersploitPowerSploit - A PowerShell Post-Exploitation Framework
secretsquirrel/the-backdoor-factoryPatch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors
thewover/donutGenerates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs…
saadahla/filelesspeloaderLoading Remote AES Encrypted PE in memory , Decrypted it and run it
med0x2e/executeassemblyLoad/Inject .NET assemblies by; reusing the host (spawnto) process loaded CLR AppDomainManager, Stomping Loader/.NET assembly PE DOS headers,…
hagrid29/peloaderPE loader with various shellcode injection techniques
ntdallas/bof_runpeBOF to run PE in Cobalt Strike Beacon without console creation
checkpointsw/vectoredoverloadingLocal PE injection technique using hardware breakpoints and vectored exception handling to manipulate DLL loading and execute arbitrary payloads, as…
racoten/reflectivepluginloaderA minimal PE mapper that loads DLLs straight from memory and calls into a clean plugin interface, no LoadLibrary needed.
maldev-academy/ghostlyhollowingviatamperedsyscalls2Implementing Ghostly-Hollowing using tampered syscalls for remote PE injection
thoxy67/zig-peReflective PE loader written in Zig. Loads and executes native and .NET PE files directly from memory.
withsecurelabs/callstackspooferA PoC implementation for spoofing arbitrary call stacks when making sys calls (e.g. grabbing a handle via NtOpenProcess)
kudaes/dinvoke_rsDynamically invoke arbitrary unmanaged code
xforcered/bokuloaderA proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!