Tools

ccob/threadlessinject

Threadless Process Injection using remote function hooking.

nettitude/runpe

C# Reflective loader for unmanaged binaries.

rizinorg/rizin

UNIX-like reverse engineering framework and command-line toolset.

techryptic/pokemon-shellcode-loader

Tired of looking at hex all day and popping '\x41's? Rather look at Lugia/Charmander? I have the solution for you.

cybereason/siofra

Simulates the Windows PE loader to identify DLL hijacking vulnerabilities, generates weaponized DLLs with shellcode payloads, and detects UAC…

d3lb3/keefarcereborn

A standalone DLL that exports databases in cleartext once injected in the KeePass process.

deepinstinct/dirty-vanity

A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.html#dirty-vani…

epi052/osed-scripts

bespoke tooling for offensive security's Windows Usermode Exploit Dev course (OSED)

rad9800/pmd

Practical Windows malware development course: API hashing, DLL sideloading, shellcode execution, PE manipulation, payload hosting, and delivery labs.

sam00/poc-cve-2026-0300-exploit

Palo Alto - CVE-2026-0300 exploit

saerxcit/libtp_gadget

Crystal Palace library for proxying Nt API calls via the Threadpool. Updated for call gadgets.

winterknife/silverpick

Windows User-Mode Shellcode Development Framework (WUMSDF)

touhidshaikh/bin2shell

bin2shell is very small utils for extract shell code from the binary file

vlad902/hacking-team-windows-kernel-lpe

Previously-0day exploit from the Hacking Team leak, written by Eugene Ching/Qavar.

dhn/slae

Securitytube Linux Assembly Expert (SLAE)

bishopfox/cve-2021-35211

Python exploit for Serv-U SSH vulnerability (CVE-2021-35211) with multiple payload modes: stage, exec, and download-execute, enabling shellcode…

gh05tcrew/metasploitmcp

MCP Server for Metasploit

flangvik/sharpproxylogon

C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode injection