dullpurple-sloop726/cve-2026-31431-linux-copy-failExploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.
hfiref0x/kduWindows kernel driver utility that abuses vulnerable signed drivers (BYOVD) to bypass DSE, load unsigned drivers, hijack protected processes, and…
vanivamshi/cve-2013-2028-exploitDocker-based lab and Python exploit for CVE-2013-2028, an Nginx 1.3.9 chunked-parser integer overflow, covering canary recovery, mprotect, and…
d7ead/mkpivmGenerate polymorphic, position-independent virtual machines (PIVMs) from arbitrary x86/x64 shellcode.
schich/lucky-sparkA stealthy stager designed for shellcode payloads staged with http/https like Sliver, or on github raw.
hasherezade/libpeconvCustom PE loading and manipulation library for manual mapping, IAT hooking, memory dumping, and rebuilding imports for malware analysis and reverse…
themalwareguardian/cve-2025-34096SEH-based buffer overflow in Easy File Sharing Web Server 7.2, reachable through the password recovery endpoint.
themalwareguardian/cve-2020-13768Stack-based buffer overflow in MiniShare 1.4.1 reachable through a single HTTP PUT request.
umpolungfish/byvalvertakes shellcode bad-bytes and banishes them, returning cleaned shellcode with preserved functionalities
checkpointsw/vectoredoverloadingLocal PE injection technique using hardware breakpoints and vectored exception handling to manipulate DLL loading and execute arbitrary payloads, as…
hkl1x/bypass_avEvades AV and sandboxes on Windows using anti-sandbox checks, ntdll unhooking, dynamic API resolution, and multi-layer shellcode obfuscation…
blacksnufkin/rusty-playgroundSome Rust program I wrote while learning Malware Development
gaasedelen/patchingAn Interactive Binary Patching Plugin for IDA Pro
s3cur3th1ssh1t/nim-runpeA Nim implementation of reflective PE-Loading from memory
charchit-subedi/chamilo-lms-unauthenticated-rce-pocThis is a script written in Python that allows the exploitation of the Chamilo's LMS software security flaw described in CVE-2023-4220
ergrelet/themida-unmutateStatic deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.
senzee1984/inflativeloadingDynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.
