reverse-shell
lukechilds/reverse-shellOn-demand reverse shell service that auto-detects target environment and executes appropriate payload for remote access during penetration tests.
command-and-controlexploitationpenetration-testing+3
2.1k
lukechilds/reverse-shellOn-demand reverse shell service that auto-detects target environment and executes appropriate payload for remote access during penetration tests.
lepotekil/msfmaniaPython AV Evasion Tools
iamsopotatoe-coder/tinyloadOpen source Windows x64 PE packer and crypter. Compresses and encrypts executables with a custom virtual machine into a self extracting stub.
iss4cf0ng/ironpeRust-based Windows PE manual loader that maps and executes x86/x64 executables from memory, demonstrating internal loader behavior and PE structure…
0xsp-srd/aetherWindows memory-forensics and threat hunting tool that scans live process memory for malicious patterns, injection techniques, and reflectively loaded…
ignacioj/whacamoleLive memory analysis detecting malware IOCs in processes, modules, handles, tokens, threads, .NET assemblies, memory address space and environment…
liyuxuan504-byte/cve-2026-142667-Zip XZ Decoder Heap Buffer Overflow - Full analysis, root cause, PoC, and RCE exploitation roadmap
darthton/blackboneWindows memory hacking library
codewhitesec/handlekatzPIC-based Lsass memory dumper using cloned handles to evade detection, producing obfuscated dumps with minimal memory footprint for red team…
risksense-ops/cve-2016-6366Public repository for improvements to the EXTRABACON exploit
spiralbl0ck/analysis-for-stage1-shellcode-loader-from-hacking-Analysis for stage1 shellcode loader from hacking
symbolexe/draytek-exploitCVE-2022-23093 FreeBSD Stack-Based Overflow
monoxgas/srdiShellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode
lem0nsec/shellghostA memory-based evasion technique which makes shellcode invisible from process start to end.
forrest-orr/artifacts-kitPseudo-malicious usermode memory artifact generator kit designed to easily mimic the footprints left by real malware on an infected Windows OS.
winterknife/evenstarIntel 64/Windows low-level experiments
ntdallas/bof_runpeBOF to run PE in Cobalt Strike Beacon without console creation