This report details a digital forensic investigation of a fileless malware attack initiated by a compromised USB device. The analysis reconstructs a multi-stage execution chain (VBS, BAT, and Pytho...

简单的红队shellcode加载器. Contribute to guaidao2/rust-loader development by creating an account on GitHub.

轻量级 Windows 进程研究与分析工具。支持多策略 DLL 注入（CRT / APC / Hook / Manual Map）、Shellcode 执行与 JIT 汇编预览、内存十六进制浏览及进程模块联动。 - ouye/ProcStudio

Process Injection is the most stealthy technique that threat actors use for creating thread in existing legitimate process. I dev this prototype to demonstrate how process injection malwares inject...

A cross-platform C++ framework for building Windows shellcode - vmi-rs/scfw

Shellcode Obfuscator in GUi. Contribute to nchgroup/sc_obf development by creating an account on GitHub.

Simple shellcode injector. Contribute to mjwhitta/runsc development by creating an account on GitHub.

Windows DFIR investigation of simulated in-memory processing using PowerShell, Sysmon process and network telemetry, PowerShell Script Block Logging, filesystem analysis, and telemetry-gap assessme...

picoclone CTF challenge: Shellcode Shack (binary exploitation · hard) - sparflag/shellcode-injection

通过 shellcode 注入，对任意窗口设置/查询截图亲和力 (Window Display Affinity: none/monitor/exclude)。单文件、无 DLL、无临时文件。 - wudream813/wda-inject

Shellcode development involves creating payloads for post-exploitation tasks like antivirus evasion and UAC bypass. Tools like shellcode loaders and injectors enable execution, while assembly and e...

Contribute to exsarorrayzer/shellcode-builder development by creating an account on GitHub.

Anaguma is a tool capable of exploiting code cave in binaries in order to inject shellcode. - Plunder283/anaguma

Contribute to mrzaxaryan/machine-code-shellcode development by creating an account on GitHub.

Contribute to lfgrillo83/shellcode-xor-encrypt development by creating an account on GitHub.

This is Thread Manuall mapping Technique Create By Shlok That Inject shellcode (dll hex) into process memory Using Direct Thread Hijacking - ShlokBorad/Thread-Map-Technique

PIC shellcode agent based on Stardust framework and Crystal Palace - Whispergate/Starburst

A proof-of-concept tool that abuses SeDebugPrivilege to inject shellcode into SYSTEM processes on Windows. Supports RC4-encrypted payloads and cross-compilation from Linux via MinGW. - jaytiwari05/...

SeDebugPrivileged shellcode injector. Contribute to stillbigjosh/SeDebugPriv development by creating an account on GitHub.

A open source example of using PoolParty to inject shellcode in a process - meltedcubes/PoolParty