Creation of multiple Malware tools consisting of evasion, enumeration and exploitation
☆105Nov 11, 2026Updated this week
Alternatives and similar repositories for MalDev
Users that are interested in MalDev are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CnaEmulator is a standalone, general-purpose development, emulation, and testing harness for Cobalt Strike Aggressor Scripts (.cna)☆22Sep 20, 2026Updated last month
- GhostHound is a BloodHound OpenGraph extension that surfaces Active Directory tombstone reanimation as a first-class attack path, enumera…☆47Aug 9, 2026Updated 3 months ago
- A stealthy stager designed for shellcode payloads staged with http/https like Sliver, or on github raw.☆64Jul 20, 2026Updated 3 months ago
- A collection of techniques for process injection on Windows☆105Updated this week
- A PoC tool for the Pass-ta-key Golden Attack, covering the extraction of the Google Password Manager Security Domain Secret from Chrome p…☆60Updated this week
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Phantom-Evasion-Loader is a standalone, pure x64 Assembly injection engine engineered to minimize the detection surface of modern EDR/XDR…☆117Aug 8, 2026Updated 3 months ago
- COM Windows Persistence Technique☆91Apr 27, 2026Updated 6 months ago
- A BOF designed to inspect processes memory and addresses☆43Apr 19, 2026Updated 6 months ago
- Automatically deploying Mythic C2 in Azure using Terraform☆25Jul 3, 2026Updated 4 months ago
- A C# PE loader for x64 and x86 PE files.☆57Mar 9, 2026Updated 8 months ago
- The samples referenced in my book, Evasive Malware (No starch Press)☆62Feb 20, 2026Updated 8 months ago
- ☆32Apr 2, 2026Updated 7 months ago
- PowerShell toolkit for AMSI/Defender detection-boundary analysis and static malware triage maps byte offsets to detection triggers, plus …☆85Nov 1, 2026Updated last week
- A small Windows local-privilege-escalation (LPE) misconfiguration auditor with a terminal UI, built with C++20 and FTXUI☆25Oct 23, 2026Updated 3 weeks ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Nim-based encryption tool for obfuscating shellcode and payloads for evading Windows Defender.☆30Jul 14, 2026Updated 4 months ago
- ExportHider: Generating Export Table during Runtime to Hide the Exported Functions from the DLL File.☆36Apr 12, 2026Updated 7 months ago
- TCP Port Forwarding Utility on C☆42Jun 18, 2026Updated 4 months ago
- Windows User-Mode Shellcode Development Framework (WUMSDF)☆163Jul 15, 2026Updated 3 months ago
- Clean Indirect Syscalls with Syscall Tampering.☆55Oct 25, 2026Updated 2 weeks ago
- This C# tool sprays for admin access over the entire domain☆90Dec 7, 2025Updated 11 months ago
- ☆37May 19, 2026Updated 5 months ago
- Windows x64 API hashing library that bypasses EAF and resolves forwarded exports, ordinals, and api-ms-*/ext-ms-* API Set DLLs.☆72Oct 7, 2026Updated last month
- ☆14Jun 24, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- NØW is a word-based shellcode encoding and obfuscation tool that transforms raw shellcode bytes into natural-looking English prose.☆92Jun 24, 2026Updated 4 months ago
- OneDrive as a covert C2 transport for Cobalt Strike☆79Sep 19, 2026Updated last month
- Remote DLL Injection with Timer-based Shellcode Execution☆214Jul 18, 2025Updated last year
- A shellcode loader generator with support for multiple injection techniques, built for red team engagements.☆105Jul 1, 2026Updated 4 months ago
- A small set of Beacon Object Files (BOFs) that I developed over the time with a Magic: The Gathering theme.☆22Jul 15, 2025Updated last year
- ☆72Jul 12, 2026Updated 4 months ago
- A Beacon Object File (BOF) that performs the complete ESC1 attack chain in a single execution: certificate request with arbitrary SAN (+S…☆119Dec 21, 2025Updated 10 months ago
- The PoC for CVE-2025-70795 / CVE-2026-0828 and updated driver☆49Mar 13, 2026Updated 8 months ago
- Novel Windows process injection: assembles existing open handles (process & thread), natural RWX regions, and special user APC (NtQueueAp…☆81Feb 17, 2026Updated 8 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- PowerShell implementation for AD CS☆163Jul 30, 2026Updated 3 months ago
- AV/EDR processes termination by exploiting a vulnerable driver (BYOVD)☆305Jan 21, 2026Updated 9 months ago
- Fairy Law - Compromise or disable EDR security solutions☆80Dec 1, 2025Updated 11 months ago
- Dump LSASS via physical memory read primitives in vulnerable kernel drivers☆35Jul 23, 2026Updated 3 months ago
- ☆92Sep 3, 2026Updated 2 months ago
- C2-agnostic BOF collection, categorized by attack chain phase. Designed to be small and modular, allowing for quick execution and automat…☆321Oct 17, 2026Updated 3 weeks ago
- Commandline spoofing on Windows☆100Jul 19, 2026Updated 3 months ago
Are these results useful?