Tools

s3cur3th1ssh1t/nimgetsyscallstub

Dynamically extracts fresh syscall stubs from ntdll.dll to evade signature-based detection, with a shellcode execution template for Nim-based…

cbwang505/cve-2019-0708-exp-windows

CVE-2019-0708-EXP-Windows版单文件exe版,运行后直接在当前控制台反弹System权限Shell

gamozolabs/elfloader

An architecture-agnostic ELF file flattener for shellcode

georgesotiriadis/chimera

Automated DLL Sideloading Tool With EDR Evasion Capabilities

cblabresearch/clematis

PE to shellcode

a3h1nt/gimmesh

For pentesters who don't wanna leave their terminals.

jfmaes/sharpziprunner

Executes position independent shellcode from an encrypted zip

blacknbunny/mcreator

Encoded Reverse Shell Generator With Techniques To Bypass AV's

0x09al/dns-persist

DNS-Persist is a post-exploitation agent which uses DNS for command and control.

aahmad097/badoutlook

Proof-of-concept C# tool that reads Outlook emails via COM interface, extracts base64-encoded shellcode from trigger subject lines, and executes…

senzee1984/micr0_shell

micr0shell is a Python script that dynamically generates Windows X64 PIC Null-Free reverse shell shellcode.

frkngksl/hintinject

A PoC project for embedding shellcode to Hint/Name Table

beichendream/cve-2022-26134-godzilla-memshell

Java-based exploit for CVE-2022-26134 that injects a Godzilla webshell into Confluence servers, enabling remote code execution with password and key…

ergrelet/themida-unmutate

Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.

hatriot/shellme

simple shellcode generator

checkpointsw/vectoredoverloading

Local PE injection technique using hardware breakpoints and vectored exception handling to manipulate DLL loading and execute arbitrary payloads, as…

d3ext/dfshell

Python-based forward shell tool that creates a TTY-like interactive shell over HTTP using named pipes, enabling command execution on firewalled…

blacknbunny/shellcode2assembly

💻 ARCH : ARM, ARM64, MIPS, PPC, X86