
MorphAES
IDPS & SandBox & AntiVirus STEALTH KILLER. MorphAES is the world's first polymorphic shellcode engine, with metamorphic properties and capability to…

IDPS & SandBox & AntiVirus STEALTH KILLER. MorphAES is the world's first polymorphic shellcode engine, with metamorphic properties and capability to…

Go shellcode loader that combines multiple evasion techniques

poc for CVE-2025-24252 & CVE-2025-24132

Go package that aids in binary analysis and exploitation

Python-based forward shell tool that creates a TTY-like interactive shell over HTTP using named pipes, enabling command execution on firewalled…

Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.

A shellcode loader generator with support for multiple injection techniques, built for red team engagements.



A third-party Gopher Assassin for the Havoc Framework.

Simple dotnet Native AOT app that uses AsmResolver to convert shellcode to PE

Header-only C++2x compile-time assembler for x86/x86-64 instruction encoding

Automated Active Directory post-exploitation toolkit for Kerberos ticket extraction, NTLM relay attacks, and lateral movement via NetExec, Impacket,…

Python-based antivirus evasion tool generating undetectable executables from msfvenom payloads with advanced techniques like junkcode injection,…

Hacked up Dirty Pipe (CVE-2022-0847) PoC that hijacks a SUID binary to spawn a root shell. (and attempts to restore the damaged binary as well)

Simple dotnet Native AOT app that uses LibObjectFile to convert shellcode to ELF

Proof of concept for CVE-2024-54756, a vulnerability I found in GZDoom's ZScript scripting engine.