Empire
bc-security/empireEmpire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
adversarial-attackcommand-and-controldata-exfiltration+16
5.3k
bc-security/empireEmpire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
keystone-engine/keystoneMulti-architecture assembler framework that converts assembly source into machine code for Arm, x86, MIPS, PowerPC, RISC-V, and more, with a…
y0naldez/cve-2024-28397-js2py-rceGenerates JavaScript payloads to exploit CVE-2024-28397 Js2Py sandbox escape, enabling remote command execution and reverse shells via Python…
senzee1984/micr0_shellmicr0shell is a Python script that dynamically generates Windows X64 PIC Null-Free reverse shell shellcode.
sliverarmory/malasadaLinux Shared Library to Shellcode Loader
seanheelan/anamnesis-releaseEvaluation framework for studying LLM agents that automatically generate working exploits from vulnerability reports, bypassing modern security…
hasherezade/pe_to_shellcodeConverts PE into a shellcode
thewover/donutGenerates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs…
nytrorst/shellcodecompilerShellcode Compiler
memn0ps/venom-rsRusty Injection - Shellcode Reflective DLL Injection (sRDI) in Rust (Codename: Venom)
veil-framework/veilVeil 3.1.X (Check version info in Veil at runtime)
optiv/mangleMangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs
bl4ckm1rror/fud-uuid-shellcodeC++ shellcode injection technique using XOR encryption and UUID string conversion to bypass Windows Defender, with function call obfuscation and…
f1zm0/hadesGo shellcode loader that combines multiple evasion techniques
that-guy-steve/cve-2022-28368-handlerThis repository contains a python script that will handle the majority of the dompdf cached font exploit (CVE-2022-28368), all you need to do is…
d3lb3/keefarcerebornA standalone DLL that exports databases in cleartext once injected in the KeePass process.
capt-meelo/lazzzyShellcode loader demonstrating multiple execution techniques including direct syscalls, IAT evasion, encrypted payloads, PPID spoofing, and code…
mgeeky/shellcodefluctuationAn advanced in-memory evasion technique fluctuating shellcode's memory protection between RW/NoAccess & RX and then encrypting/decrypting its contents