Load various payload (DLL from memory, Exe, etc...) in a way to evade static analysis of Antivirus. It can fetch data from various methods and perform multiple data operation to deobfuscate or decrypt payloads and new configuration.
☆15Mar 5, 2026Updated this week
Alternatives and similar repositories for malleable-rust-loader
Users that are interested in malleable-rust-loader are comparing it to the libraries listed below
Sorting:
- Basic Tonic (gRPC) example using Windows Named Pipes as transport☆11Oct 7, 2024Updated last year
- process hollowing variant using NtCreateSection + NtMapViewOfSection + ResumeThread☆31Jan 9, 2022Updated 4 years ago
- Rust crate to parse user-mode minidump files generated on Windows☆18Nov 17, 2025Updated 3 months ago
- various methods of making API calls☆19Feb 1, 2025Updated last year
- Self-updatable RAT + C2 server + client.☆16Jun 24, 2024Updated last year
- MacOS Stealer written in Rust. For Legal and Ethical Research Purposes Only.☆26Jan 3, 2025Updated last year
- A C++/Asm template for PIC/EXE/DLL malware☆24Aug 12, 2025Updated 6 months ago
- A hacky way of getting cross-arch/platform support in Cobalt Strike☆37Aug 31, 2025Updated 6 months ago
- ☆55May 31, 2025Updated 9 months ago
- Unix Process hollowing in rust☆22Dec 16, 2024Updated last year
- Rule Engine for Dynamic Malware Analysis and Research☆25Apr 16, 2025Updated 10 months ago
- Dynamically invoke arbitrary code in Rust (Dinvoke)☆101Dec 1, 2025Updated 3 months ago
- A unique introduction to native runtime obfuscation.☆75Mar 2, 2025Updated last year
- Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials☆61May 12, 2025Updated 9 months ago
- Event Tracing for Windows EDR bypass in Rust (usermode)☆39Jun 9, 2024Updated last year
- ☆61Oct 24, 2025Updated 4 months ago
- Prevent in-process process termination by patching exit APIs☆63Nov 9, 2025Updated 3 months ago
- A Rust library for parsing and writing MS Shell Links (shortcuts, *.lnk)☆32Sep 2, 2025Updated 6 months ago
- NSecSoftBYOVD POC☆57Feb 12, 2026Updated 3 weeks ago
- find dll base addresses without PEB WALK☆160Jul 13, 2025Updated 7 months ago
- Reflective shellcode loaderwith advanced call stack spoofing and .NET support.☆227Sep 19, 2025Updated 5 months ago
- A Rust version of Mirage, a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.☆38Mar 6, 2025Updated last year
- converts sRDI compatible dlls to shellcode☆35Jan 20, 2025Updated last year
- A Rust template for writing Beacon Object Files (BOFs)☆101Feb 11, 2026Updated 3 weeks ago
- Alternative Read and Write primitives using Rtl* functions the unintended way.☆79Aug 25, 2025Updated 6 months ago
- Select any exported function in a dll as the new dll's entry point.☆81Oct 25, 2024Updated last year
- Writing Nimless Nim - Slides and source for BSIDESKC 2024 talk.☆85Jul 11, 2025Updated 7 months ago
- Activation Context Hijack☆170Aug 3, 2025Updated 7 months ago
- PS-MOTW: PowerShell scripts to set / show / remove MOTW (Mark of the Web)☆57Nov 16, 2023Updated 2 years ago
- A malware development library written in rust.☆13Jan 13, 2024Updated 2 years ago
- slides for talk given during uscg 2023 combine☆38Sep 6, 2023Updated 2 years ago
- Rust Based PE & Shellcode Packer☆40Dec 28, 2025Updated 2 months ago
- A large collection of blogs 🦐☆13Apr 12, 2025Updated 10 months ago
- Rust crate to run commands as another user☆54Feb 12, 2026Updated 3 weeks ago
- This repository contains a collection of scripts I use regularly for offensive security-related tasks.☆15Jan 17, 2026Updated last month
- Robust Cobalt Strike shellcode loader with multiple advanced evasion features☆200Apr 21, 2025Updated 10 months ago
- A collection of FreeBSD rootkit kernel modules and utilities☆13Jun 25, 2025Updated 8 months ago
- WinDbg plugin to trace module transitions from a debugged driver.☆40Dec 22, 2025Updated 2 months ago
- ☆13Mar 28, 2024Updated last year