Tools

ustayready/wnfexec

WNF Code Execution Library Using C#

frkngksl/hintinject

A PoC project for embedding shellcode to Hint/Name Table

ofasgard/execute-assembly-pico

A PICO for Crystal Palace that implements CLR hosting to execute a .NET assembly in memory.

bishopfox/asminject

Heavily-modified fork of David Buchanan's dlinject project. Injects arbitrary assembly (or precompiled binary) payloads directly into x86-64, x86,…

iilegacyyii/datainject-bof

Hijacks code execution via overwriting Control Flow Guard pointers in combase.dll

checkpointsw/vectoredoverloading

Local PE injection technique using hardware breakpoints and vectored exception handling to manipulate DLL loading and execute arbitrary payloads, as…

blacksnufkin/rusty-playground

Some Rust program I wrote while learning Malware Development

forrest-orr/exploits

A personal collection of Windows CVE I have turned in to exploit source, as well as a collection of payloads I've written to be used in conjunction…

techryptic/pokemon-shellcode-loader

Tired of looking at hex all day and popping '\x41's? Rather look at Lugia/Charmander? I have the solution for you.

forrest-orr/doublestar

A personalized/enhanced re-creation of the Darkhotel "Double Star" APT exploit chain with a focus on Windows 8.1 and mixed with some of my own…

symeonp/lenovo-cve-2025-8061

PoC for popping a system shell against the LnvMSRIO.sys driver

zarkones/bloodfangc2

Modern PIC implant for Windows (64 & 32 bit)

s3cur3th1ssh1t/nimshellcodefluctuation

ShellcodeFluctuation PoC ported to Nim

sliverarmory/malasada

Linux Shared Library to Shellcode Loader

kristal-g/cve-2021-40449_poc

Exploit for CVE-2021-40449

dump-guy/sc2pe

Simple dotnet Native AOT app that uses AsmResolver to convert shellcode to PE

therealdreg/nasm_linux_x86_64_pure_sharedlib

NASM Linux x86_64 pure (no deps) shared library (.so), POC for Reflective ELF SO injection

0x00jeff/cve-2025-27591

self cleaning CVE-2025-27591 Poc that grants a root reverse shell instead of modifying passwd files