This report details a digital forensic investigation of a fileless malware attack initiated by a compromised USB device. The analysis reconstructs a multi-stage execution chain (VBS, BAT, and Pytho...

Collection of remote shellcode Loaders using APCs, direct/indirect syscalls, ntdll and low level utilities, undetected by Windows Defender and BitDefender - Hue-Jhan/Syscall-Apc-Injection-Trojans

Collection of remote shellcode Loaders using Early Bird APC injection, direct/indirect syscalls, ntdll and low level utilities, undetected by Windows Defender and BitDefender - Hue-Jhan/Syscall-Ear...

This contains a number of shell functions that may be of use. The intention is for the root of this repository to be cloned to an area in a user's home directory. Then `shellFunctionSetup.s...

ROP chain filter & shellcode helper for exploit developers — built for OSED/OSCE3 - Tendarkness/roprop

Takes a PID, injects Meterpreter shellcode into PID process, and execute it // using a remote thread. Windows x64 - cristian17cruz/shellcodewithPID

ShenCode 2026: Next-Gen Shellcode Builder & Payload Converter Suite - erengng/shellforge

x64 shellcode loader. Contribute to alternat0r/shellcode-loader development by creating an account on GitHub.

Collection of shellcodes for exploit development and reverse engineering. These shellcodes are made in the course of my learning - kex0rbin/shelllcoding-vault

shellcode transformation tool for YARA evasion. Contribute to kypvas/shellcode-mutator development by creating an account on GitHub.

service_loader shellcode loader by service schuld. Contribute to rootdz1337/service_loader development by creating an account on GitHub.

abolo_service_loader shellcode loader . Contribute to rootdz1337/abolo_service_loader development by creating an account on GitHub.

Contribute to KickedDroid/pic-shellcode-template development by creating an account on GitHub.

A monolithic, version-agnostic Windows x64 shellcode loader demonstrating hardware Intel CET compliance, module overloading, and dynamic indirect syscalls for clean, fully backed call stacks. - ac1...

Unified .NET assembly & shellcode payload builder — msfvenom-style CLI for LOLBin injection (MSBuild, InstallUtil, RegAsm, RegSvcs, CSC, PowerShell, VBScript, HTA, VBA, Workflow Compiler) -...

Professional shellcode encoder & AV/EDR evasion framework written in Rust - Kronoscba/shroud

PoC of bypass in userland EDR & AV with shellcode and modificate PE. September 2026 - Raaatus/PoC-Bypass-EDR-AV-Fully-Userland-PE-Bits-Manipulation

A x64 PIC windows shellcode which uses djb2 hashing to locate kernel32.dll & WinExec. This is an update to my repo, https://github.com/wizardy0ga/improving-my-x64-PIC-shellcode-windows-peb-...

Advanced evasion tradecraft & penetration testing notes — AV/EDR evasion, process injection, custom shellcode loaders, AMSI bypasses, and lateral movement. - darch244/OSEP-Offensive-Securit...

简单的红队shellcode加载器. Contribute to guaidao2/rust-loader development by creating an account on GitHub.