IronPE
iss4cf0ng/ironpeRust-based Windows PE manual loader that maps and executes x86/x64 executables from memory, demonstrating internal loader behavior and PE structure…
binary-analysisbinary-exploitationeducation+5
124
iss4cf0ng/ironpeRust-based Windows PE manual loader that maps and executes x86/x64 executables from memory, demonstrating internal loader behavior and PE structure…
umpolungfish/byvalvertakes shellcode bad-bytes and banishes them, returning cleaned shellcode with preserved functionalities
zx0cf1/shredder-rsA high-fidelity x86_64 polymorphic mutation engine focused on instruction-level fragmentation and context preservation.
ignacioj/whacamoleLive memory analysis detecting malware IOCs in processes, modules, handles, tokens, threads, .NET assemblies, memory address space and environment…
gildasio/wshlientA simple tool to interact with web shells and command injection vulnerabilities
yo-yo-yo-jbo/msf_shellcode_analysisStatic analysis walkthrough of a Metasploit Windows shellcode: PowerShell payload decoding, XOR obfuscation, PEB walking, and Export Address Table…
withsecurelabs/radare2-scriptsCollection of radare2 scripts for malware analysis: carve binaries from memory dumps, patch PE headers, and decode hashed function imports in…
dust-life/cve-2019-18935-memshellC++ memshell DLL generator for CVE-2019-18935, enabling in-memory web shell deployment via Telerik UI deserialization with Assembly.Load and IJW…
doggycheng/cnvd-2020-10487CVE-2020-1938 / CNVD-2020-1048 Detection Tools
manojcode/foxit-reader-rce-with-virualalloc-and-shellcode-for-cve-2018-9948-and-cve-2018-9958Foxit Reader version 9.0.1.1049 Use After Free with ASLR and DEP bypass on heap
hussienmisbah/exploitsRepository containing exploit scripts for various CVEs, targeting web applications, binaries, and network services, suitable for penetration testing…
liyuxuan504-byte/cve-2026-142667-Zip XZ Decoder Heap Buffer Overflow - Full analysis, root cause, PoC, and RCE exploitation roadmap
eliangonzi00/cve-2025-2783Full-chain RCE exploit for CVE-2025-2783, a Chromium Ipcz sandbox escape vulnerability. Implements thread hijacking, V8 hooks, and shellcode…
saturate/cve-2025-55182-react2shellA bash scanner for detecting CVE-2025-55182 vulnerability in Next.js applications. And a PoC nodejs script
prelearn-code/cve-2024-6387Proof-of-concept exploit for CVE-2024-6387 (regreSSHion) targeting unauthenticated remote code execution in OpenSSH server via signal handler race…
themoonsir/watcherDetection reverse shell and kill it before trying shell.
funixone/exploit-cve-2026-8832-Automated RCE exploit for WordPress WPCode Lite v2.3.5. Executes 6-step exploitation chain via XML-RPC bypass with 8 built-in PHP payloads, including…
luoqichen/cve-2025-55182-pocGo-based scanner and exploitation tool for CVE-2025-55182 (Next.js RCE). Supports batch scanning, command execution, Godzilla memory shell injection,…