Alternatives and similar repositories for Shellcode-IDE

Users that are interested in Shellcode-IDE are comparing it to the libraries listed below

• MrAle98 / CVE-2025-21333-POC
  POC exploit for CVE-2025-21333 heap-based buffer overflow. It leverages WNF state data and I/O ring IOP_MC_BUFFER_ENTRY
  ☆226Updated 9 months ago
• MatheuZSecurity / Rootkit
  Collection of codes focused on Linux rootkits
  ☆192Updated 2 months ago
• rad9800 / byor
  ☆161Updated 7 months ago
• zeze-zeze / NamedPipeMaster
  a tool used to analyze and monitor in named pipes
  ☆193Updated last year
• Bw3ll / ROP_ROCKET
  ROP ROCKET is an advanced code-reuse attack framework, with extensive ROP chain generation capabilities, including for novel Windows Sysc…
  ☆164Updated last month
• 0xHossam / KernelCallbackTable-Injection-PoC
  Proof of Concept for manipulating the Kernel Callback Table in the Process Environment Block (PEB) to perform process injection and hijac…
  ☆267Updated last year
• CyberSecurityUP / Offensive-Windows-Drivers-Development
  ☆164Updated 10 months ago
• cocomelonc / bsprishtina-2024-maldev-workshop
  BSides Prishtina 2024 Malware Development and Persistence workshop
  ☆124Updated 2 weeks ago
• warpnet / MS-RPC-Fuzzer
  Gain insights into MS-RPC implementations that may be vulnerable using an automated approach and make it easy to visualize the data. By f…
  ☆324Updated 3 months ago
• ColeHouston / Sunder
  Windows rootkit designed to work with BYOVD exploits
  ☆211Updated last year
• tijme / dittobytes
  Metamorphic cross-compilation of C++ & C-code to PIC, BOF & EXE.
  ☆590Updated this week
• outflanknl / edr-internals
  Tools for analyzing EDR agents
  ☆276Updated last year
• ViperXSecurity / lib-nosa
  lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.
  ☆119Updated last year
• winsecurity / MaleficentVM
  This is practice VM for malware development
  ☆175Updated 2 months ago
• Cracked5pider / earlycascade-injection
  early cascade injection PoC based on Outflanks blog post
  ☆236Updated last year
• xaitax / NTSleuth
  Comprehensive Windows Syscall Extraction & Analysis Framework
  ☆159Updated 4 months ago
• sensepost / pipetap
  A Windows Named Pipe Multi-tool / Proxy
  ☆240Updated last month
• FuzzySecurity / BHUSA-2023
  ☆105Updated last year
• Idov31 / EtwLeakKernel
  Leaking kernel addresses from ETW consumers. Requires Administrator privileges.
  ☆89Updated 2 months ago
• PwnAwan / EXP-401-OSEE
  A bunch of resources to prepare for the OSEE certification, Offensive Security's hardest course.
  ☆110Updated 3 years ago
• exploits-forsale / 24h2-nt-exploit
  Exploit targeting NT kernel in 24H2 Windows Insider Preview
  ☆149Updated last year
• hasherezade / waiting_thread_hijacking
  Waiting Thread Hijacking - injection by overwriting the return address of a waiting thread
  ☆260Updated 4 months ago
• Maldev-Academy / MaldevAcademyLdr.2
  RunPE implementation with multiple evasive techniques (2)
  ☆265Updated 3 months ago
• eversinc33 / PSXecute
  MIPS VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.
  ☆123Updated last year
• rtecCyberSec / Packer_Development
  Slides & Code snippets for a workshop held @ x33fcon 2024
  ☆278Updated last year
• ynwarcs / CVE-2025-21298
  Proof of concept & details for CVE-2025-21298
  ☆193Updated last year
• 0xsch1zo / NullGate
  Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.
  ☆164Updated 5 months ago
• OtterHacker / Conferences
  ☆333Updated 3 months ago
• vxCrypt0r / Voidmaw
  A new technique that can be used to bypass memory scanners. This can be useful in hiding problematic code (such as reflective loaders imp…
  ☆337Updated last year
• Kudaes / MFTool
  Direct access to NTFS volumes
  ☆292Updated 4 months ago