
radare2-scripts
Collection of radare2 scripts for malware analysis: carve binaries from memory dumps, patch PE headers, and decode hashed function imports in…

Collection of radare2 scripts for malware analysis: carve binaries from memory dumps, patch PE headers, and decode hashed function imports in…

Analysis and ARM64 reproduction of Copy Fail (CVE-2026-31431)

Protect process by shellcode

Tired of looking at hex all day and popping '\x41's? Rather look at Lugia/Charmander? I have the solution for you.

PoCs and tools for investigation of Windows process execution techniques

A collection of various and sundry code snippets that leverage .NET dynamic tradecraft

Static analysis walkthrough of a Metasploit Windows shellcode: PowerShell payload decoding, XOR obfuscation, PEB walking, and Export Address Table…

Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".

Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver

A technique that can be used to bypass AV/EDR memory scanners. This can be used to hide well-known and detected shellcodes (such as msfvenom) by…

Evades AV and sandboxes on Windows using anti-sandbox checks, ntdll unhooking, dynamic API resolution, and multi-layer shellcode obfuscation…

SecurityTube Linux Assembly Expert x86 Exam

This is the main repository for metasm, a free assembler / disassembler / compiler written in ruby

Analysis for stage1 shellcode loader from hacking

Structured lab for controlled exploitation of CVE-2025-5548 (FreeFloat FTP Server). Includes environment setup, fuzzing, EIP control, badchars…

Patch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors

Some Rust program I wrote while learning Malware Development

WORK IN PROGRESS. RAT written in C++ using Win32 API