simple shellcode loader . Contribute to Ash1996x/shellcode-loader- development by creating an account on GitHub.

Defensive Office macro analyzer in Go: extracts VBA, deobfuscates it and emulates it in a fully simulated sandbox to recover commands, PowerShell, shellcode and dropped payloads without executing t...

An example of web based staging for shellcode, also contains basic AV evasion - jwfawcett/WindowsStagingProject

Contribute to Walkerdorothy27917/shellcode-loader-58291 development by creating an account on GitHub.

CCSO Workshop: Shellcode loader exercise. Contribute to shreyas-challa/babys-first-malware development by creating an account on GitHub.

A basic tool to inject shellcode into a remote process - dilipk5/shellcode-injector

Static analysis of a malicious RTF document: hidden exploit object, shellcode emulation and the dropper's download chain. - Fynnesse/Malware-Analysis-w-REMnux-Lab

DevaPath - x64 Windows PIC shellcode framework that resolves DLL modules and functions without PEB→Ldr walking. Uses Thread Entry Point stack scanning + MZ backward walk for module discovery, with ...

Multi-architecture shellcode emitter with typed IR, bad-character encoding, and debugger-ready harnesses. Currently targeting x86 Windows. - rogdooley/emitrion

Alma Evader takes raw shellcode (from any C2 framework) and produces a fully self-contained Windows DLL or EXE - Almavj/Alma_evader

An unrestricted shellcode compiler for c/c++ based on llvm - Laster-dev/MemLLVM

This is the another version of Shellcode Loader where I encoded the URL using XOR single byte and it mostly performs signature based evasion and sometimes Full Windows Antivirus Evasion too. - agha...

Hypervisor isolated shellcode execution environment. Maps host process memory into a guest vCPU, intercepts DLL execute faults, and proxies API calls to the host, Stardust PIC shellcode compatible ...

Find code injected into running Windows processes: reflective DLLs, shellcode threads, process hollowing, inline & IAT hooks, module stomping. Read-only, zero dependencies. - njuj/ghost-hunter

A curated, searchable index of hands-on CTF labs covering binary mitigations, stack overflows, ROP chain construction, heap exploitation, format string bugs, shellcode development, and malware reve...

Contribute to norahc-x/Margaret-Stealer development by creating an account on GitHub.

F-SOCIETY — offensive security toolkit. 20 modules: recon, bruteforce, shellcode, backdoors, rootkits, fuzzers, exploit dev. One CLI, zero bloat. By L1ghtXr / DevBrezz. - L1ghtXr/F-SOCIETY

This article focuses on extracting and analyzing shellcode from a Cobalt Strike malware sample - nguyen-duy62g00n3r/Shellcode-Extraction-and-Analysis-of-a-Cobalt-Strike-Malware-Sample

Shellcode Encryption and Encoding Tool. Contribute to sidharth-v-s/byteforge development by creating an account on GitHub.