
Shelltropy
A technique of hiding malicious shellcode via Shannon encoding.

A technique of hiding malicious shellcode via Shannon encoding.

Pseudo-malicious usermode memory artifact generator kit designed to easily mimic the footprints left by real malware on an infected Windows OS.

Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.

Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.

Local PE injection technique using hardware breakpoints and vectored exception handling to manipulate DLL loading and execute arbitrary payloads, as…

Some Rust program I wrote while learning Malware Development


A stealthy stager designed for shellcode payloads staged with http/https like Sliver, or on github raw.

takes shellcode bad-bytes and banishes them, returning cleaned shellcode with preserved functionalities

Collection of radare2 scripts for malware analysis: carve binaries from memory dumps, patch PE headers, and decode hashed function imports in…

Simple dotnet Native AOT app that uses LibObjectFile to convert shellcode to ELF

Scripts to analyze conflicker worm which exploits famous netapi vulnerability (CVE-2008-4250) i.e MS08-067

Rig Exploit for CVE-2018-8174 As with its previous campaigns, Rig’s Seamless campaign uses malvertising. In this case, the malvertisements have a…

malware del lado del cliente de explotacion de vulnerabilidad de internet explorer 6.0 SP1 en windows xp SP2. No requiere de consentimiento por parte…

C proof-of-concept that locates code caves in the .reloc section of mapped DLLs to allocate and execute small shellcode, replacing typical memory…