A post exploitation framework designed to operate covertly on heavily monitored environments

Open-Source Shellcode & PE Packer

bddisasm is a fast, lightweight, x86/x64 instruction decoder. The project also features a fast, basic, x86/x64 instruction emulator, designed specifically to detect shellcode-like behavior.

MD5-Monomorphic Shellcode Packer - all payloads have the same MD5 hash

AV Evasion Tool For Red Team Ops

Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".

VM一键加壳/脱壳，全压缩，反调试等

An easily modifiable shellcode template for Windows x64 written in C

This novel way of using NtQueueApcThreadEx by abusing the ApcRoutine and SystemArgument[0-3] parameters by passing a random pop r32; ret gadget can be used for stealthy code injection.

A flexible PE loader, loading module in memory. Most of the functions can be inline, compatible for shellcode.

Java JNI HellsGate/HalosGate/TartarusGate/RecycledGate/SSN Syscall/Many Shellcode Loaders

FLARE Kernel Shellcode Loader

A small program written in C that is designed to load 32/64-bit shellcode and allow for execution or debugging. Can also output PE files from shellcode.

Contains Attack labs

Defense evasion collections and pentesting frameworks for assessment, following Greenbone and (https://www.openVAS.org/).

A personal collection of Windows CVE I have turned in to exploit source, as well as a collection of payloads I've written to be used in conjunction with these exploits.

A PICO for Crystal Palace that implements CLR hosting to execute a .NET assembly in memory.

C-shellcode to hex converter, handy tool for paste & execute shellcodes in IDA PRO, gdb, windbg, radare2, ollydbg, x64dbg, immunity debugger & 010 editor

Boilerplate to develop raw and truly Position Independent Code (PIC).

Splitting and executing shellcode across multiple pages