RAT tools use shellcodes for remote access and system control. Shellcode injection and execution techniques bypass defenses, while red team tools focus on compiling and handling payloads for post-e...

Shellcode development involves creating payloads for post-exploitation tasks like antivirus evasion and UAC bypass. Tools like shellcode loaders and injectors enable execution, while assembly and e...

.NET, PE, & Raw Shellcode Packer/Loader Written in Nim - ceftriaxon-iv/CrownLoader

PowerShell Shellcode Loader Builder. Contribute to BreachSimRange/LoaderPS development by creating an account on GitHub.

Embedding Shellcode in C++. Contribute to Evilearth-dotcom/Resource-Loading development by creating an account on GitHub.

P3 (Process Parameter Poisoning) - Windows shellcode loader via CreateProcessW params + NtSetContextThread (EDR evasion research) - HackSpeak/p3-loader

Static + dynamic analysis of a Cobalt Strike beacon loader: PE structure, Ghidra disassembly, x64dbg shellcode tracing, Wireshark C2 capture, and YARA detection rules. - jaloliddin-sec/malware-anal...

Contribute to nostdlib/CSharpShellcodeInjector development by creating an account on GitHub.

RISC-V VM based shellcode loader PoC - Still WIP. Contribute to Whispergate/JanusLoader development by creating an account on GitHub.

AES-256-CBC shellcode loader with Hell's Gate direct syscalls and Early Bird APC injection - darkness215/darkcrypt

x64 PIC shellcode that enable chrome CDP in-memory and extract/exfiltrate cookies - Nuf1p/RepentanceStealer

chacha20 Shellcode Loader. Contribute to bloggins/chacha20-Shellcode-Loader development by creating an account on GitHub.

Contribute to bloggins/AES_DLL_ShellcodeLoader development by creating an account on GitHub.

Contribute to mrzaxaryan/machine-code-shellcode development by creating an account on GitHub.

Polymorphic shellcode encoder for authorized pentesting & CTF - darkLabz001/001

DeniedLoader — C-based jittered beacon loader (6m66s) with indirect syscalls. Injects MiniDeniedXYZ (Rust shellcode) into trusted processes. Dropper creates 500+ decoy subdirectories in System32 ma...

Offensive security techniques including AMSI bypass, EDR evasion, process hollowing, and shellcode loading - SlugRegister/offensive-maldev

OPSEC-safe shellcode loader — half-way process hollowing in C#. No unbacked RX regions, no VirtualAllocEx, no APC injection. - asvased/half-way-process-hollowing

C2 framework: Flask + C# implant with credential harvesting and shellcode generation via Donut. - DaviAlcanfor/Leviathan

Shellcode encoding and API call obfuscation with WSummerhill's Diction method - TiredMir/MaleDiction