Static analysis of a malicious RTF document: hidden exploit object, shellcode emulation and the dropper's download chain. - Fynnesse/Malware-Analysis-w-REMnux-Lab

Multi-architecture shellcode emitter with typed IR, bad-character encoding, and debugger-ready harnesses. Currently targeting x86 Windows. - rogdooley/emitrion

Alma Evader takes raw shellcode (from any C2 framework) and produces a fully self-contained Windows DLL or EXE - Almavj/Alma_evader

An unrestricted shellcode compiler for c/c++ based on llvm - Laster-dev/MemLLVM

Hypervisor isolated shellcode execution environment. Maps host process memory into a guest vCPU, intercepts DLL execute faults, and proxies API calls to the host, Stardust PIC shellcode compatible ...

A curated, searchable index of hands-on CTF labs covering binary mitigations, stack overflows, ROP chain construction, heap exploitation, format string bugs, shellcode development, and malware reve...

This article focuses on extracting and analyzing shellcode from a Cobalt Strike malware sample - nguyen-duy62g00n3r/Shellcode-Extraction-and-Analysis-of-a-Cobalt-Strike-Malware-Sample

Shellcode Encryption and Encoding Tool. Contribute to sidharth-v-s/byteforge development by creating an account on GitHub.

Polymorphic AMSI and shellcode bypass. Contribute to anatemnein/lilith development by creating an account on GitHub.

a lightweight stand alone nodejs shell code injector - 00nx/shell-js

BOF that enables SeDebugPrivilege on the current process and injects shellcode into a target process. Designed for AdaptixC2. Not OpSec safe by default. - retimax/SeDebugPrivilege-BOF

A Unicorn-based Windows user-mode emulation engine focused on PE unpacking, shellcode extraction, and pre-payload behavior fingerprinting, running on both Windows and Linux. Samples execute inside ...

Shellcode Handcrafted & Engineered at Low Level (S.H.E.L.L.) is a repository that aims to create a collection of handmade (also not vibe-coded) custom shellcodes - daemoncibsec/S.H.E.L.L.

Convert a shellcode binary file into an executable ps1 script - B1gCheater/shellcode2pwsh5

x64 process injection PoC combining shared-section memory mapping with thread context hijacking to execute shellcode in a remote process, resolving all Nt* functions via PEB walking and hash-based ...

A curated collection of hands-on binary exploitation CTF labs covering Position-Independent Shellcode, Ret2libc, Ret2csu, Ret2dlresolve, Stack Pivoting, SEH Overwrites, Vtable Drift, and Memory Lea...

Developed a C++17 Local Procedure Call (LPC) system using Unix Named Pipes and scatter/gather I/O. Engineered a custom binary protocol with asynchronous multi-threading, deep payload inspection to ...

most simple shellcode execution in CGO. Contribute to grisuno/ejecutarShellcode development by creating an account on GitHub.

This project leverages the legitimate "Netsh Helper DLL" functionality in Windows to execute malicious code (shellcode) within the context of the trusted netsh.exe process. Ideal ...