Tools

ruycr4ft/cve-2023-38831

Proof-of-concept exploit for CVE-2023-38831 targeting vulnerable versions, delivering a reverse shell via automated exploitation.

redsiege/excelntdonut

Excel 4.0 (XLM) Macro Generator for injecting DLLs and EXEs into memory.

redcode-labs/gosh

Golang reverse/bind shell generator

umpolungfish/byvalver

takes shellcode bad-bytes and banishes them, returning cleaned shellcode with preserved functionalities

idov31/sandman

NTP-based backdoor for hardened networks, delivering and executing arbitrary shellcode via spoofed NTP traffic with optional persistence as a Windows…

t1ckprivate/cve-2026-43284-dirty-frag

Pre-compiled exploit for CVE-2026-43284 (Dirty Frag) with multi-architecture support (x86_64, i386, aarch64, armv7, riscv64, ppc64le, s390x).…

shotokhan/cve_2022_0847_shellcode

Implementation of CVE-2022-0847 as a shellcode

liquid1998/variatype.htb-cve-2025-66034

Python exploit script for CVE-2025-66034 targeting Variatype on Hackthebox, providing initial access via command injection and base64-encoded reverse…

inf0secrabbit/badassmacros

C# tool that generates malicious VBA macros with shellcode injection, VBA purging, and sandbox detection for red team operations.

dis0rder0x00/dbgnexum

Shellcode injection using the Windows Debugging API

aahmad097/badoutlook

Proof-of-concept C# tool that reads Outlook emails via COM interface, extracts base64-encoded shellcode from trigger subject lines, and executes…

checkpointsw/vectoredoverloading

Local PE injection technique using hardware breakpoints and vectored exception handling to manipulate DLL loading and execute arbitrary payloads, as…

blacksnufkin/rusty-playground

Some Rust program I wrote while learning Malware Development

techryptic/pokemon-shellcode-loader

Tired of looking at hex all day and popping '\x41's? Rather look at Lugia/Charmander? I have the solution for you.

barriuso/smbghost_automateexploitation

SMBGhost (CVE-2020-0796) Automate Exploitation and Detection

nodiuus/nocturne

A bin2bin code virtualizer for x86-64 PE's

joelgmsec/invoke-stealth

Simple & Powerful PowerShell Script Obfuscator

mario1234/js-driveby-download-cve-2006-4777

malware del lado del cliente de explotacion de vulnerabilidad de internet explorer 6.0 SP1 en windows xp SP2. No requiere de consentimiento por parte…