
ThreadlessInject
Threadless Process Injection using remote function hooking.

Threadless Process Injection using remote function hooking.

An advanced in-memory evasion technique fluctuating shellcode's memory protection between RW/NoAccess & RX and then encrypting/decrypting its contents

NASM Linux x86_64 pure (no deps) shared library (.so), POC for Reflective ELF SO injection

Windows x64 handcrafted token stealing kernel-mode shellcode

Tired of looking at hex all day and popping '\x41's? Rather look at Lugia/Charmander? I have the solution for you.

Ready-to-use shellcode execution examples in C, C#, and MATLAB, covering different process-loading techniques for offensive security research and…

Nim PoC that hooks Sleep to encrypt in-memory shellcode during idle periods, defeating memory scanner detection and supporting C2 implant operations.

Windows code injection PoC that abuses the fork API to execute ntdll-based shellcode in a forked process and bypass EDRs.

A simple ptrace-less shared library injector for x64 Linux

This repo contains : simple shellcode Loader , Encoders (base64 - custom - UUID - IPv4 - MAC), Encryptors (AES), Fileless Loader (Winhttp, socket)

Simple dotnet Native AOT app that uses AsmResolver to convert shellcode to PE

Hijacks code execution via overwriting Control Flow Guard pointers in combase.dll

Modern PIC implant for Windows (64 & 32 bit)

PoC for popping a system shell against the LnvMSRIO.sys driver

A PICO for Crystal Palace that implements CLR hosting to execute a .NET assembly in memory.

Converts PE files (EXE/DLL) into position-independent shellcode with optional LZNT1 compression and obfuscation, supporting x86/x64, .NET, and Go…


Extracts executable shellcode from compiled binary files and outputs escaped hexadecimal byte strings (e.g., \x45\x6e) for exploit development and…