A Windows executable obfuscation toolkit combining runtime PE encryption, executable packing, and code genepolymorphicration. Features configurable binary transformations, file size manipulation, ...

A next-generation PHP web shell designed for maximum stealth and power: real-time terminal, auto-kernel exploits, Windows admin bypass, symlink tools, config grabbers, cPanel/WP hacks, mass defacer...

Alma Evader takes raw shellcode (from any C2 framework) and produces a fully self-contained Windows DLL or EXE - Almavj/Alma_evader

Find code injected into running Windows processes: reflective DLLs, shellcode threads, process hollowing, inline & IAT hooks, module stomping. Read-only, zero dependencies. - njuj/ghost-hunter

CET ShadowStack Walker Bypass / EDR+EPP BYPASS. Contribute to 0sha0/Cet-Bypass development by creating an account on GitHub.

Polymorphic AMSI and shellcode bypass. Contribute to anatemnein/lilith development by creating an account on GitHub.

本人长期关注 Win x64、AV/EDR 安全检测、PE 文件分析、Shellcode 原理、内存分析、Windows API、逆向工程及相关安全研究技术。 希望与具有相关经验的技术研究人员交流学习。 - facai131488/Research-on-WinX64-internals-C-C-PE-analysis-EDR-detection-and-defensive-securit...

Windows shellcode-loader proof of concept for security research. - Goodworkid0/EDR-Evasion-Shellcode-Exe-DLL-

Offensive C loader implementing EDR evasion techniques (XOR encryption, dynamic API resolution, AMSI bypass, ntdll unhooking) with process injection into notepad.exe — includes Sysmon detection rul...

Advanced memory evasion PoC that cyclically encrypts shellcode and fluctuates between RW/NoAccess and RX memory protections to bypass memory scanners like Moneta and PE-Sieve. - forkhelpburn/rpock...

Outputs mappable shellcode from PE files. Contribute to ssovfsun/SRPE development by creating an account on GitHub.

most simple shellcode execution in CGO. Contribute to grisuno/ejecutarShellcode development by creating an account on GitHub.

Laboratorio educativo de ciberseguridad: keylogger en Python, phishing web con exfiltración y bypass de antivirus en VM aislada (Windows 11 x64). Documentado con MITRE ATT&CK. Uso exclusiva...

A minimal Windows shellcode runner written in Go - loads base64 shellcode from disk or a remote URL, decodes it in memory, and executes it via VirtualAlloc + CreateThread. For authorized pentests ...

A minimal Windows shellcode runner written in Go - loads base64 shellcode from disk or a remote URL, decodes it in memory, and executes it via VirtualAlloc + CreateThread. For authorized pentests ...

Unified .NET assembly & shellcode payload builder — msfvenom-style CLI for LOLBin injection (MSBuild, InstallUtil, RegAsm, RegSvcs, CSC, PowerShell, VBScript, HTA, VBA, Workflow Compiler) -...

Hosting files on github to bypass firewall / EDR. Contribute to Gerjan-CC/hosting development by creating an account on GitHub.

Professional shellcode encoder & AV/EDR evasion framework written in Rust - Kronoscba/shroud

PoC of bypass in userland EDR & AV with shellcode and modificate PE. September 2026 - Raaatus/PoC-Bypass-EDR-AV-Fully-Userland-PE-Bits-Manipulation

A x64 PIC windows shellcode which uses djb2 hashing to locate kernel32.dll & WinExec. This is an update to my repo, https://github.com/wizardy0ga/improving-my-x64-PIC-shellcode-windows-peb-...