My collection of malware dev links
☆328Feb 9, 2026Updated 8 months ago
Alternatives and similar repositories for maldev-links
Users that are interested in maldev-links are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Collection of Beacon Object Files (BOF) for Cobalt Strike☆714Sep 9, 2026Updated last month
- Replace the .txt section of the current loaded modules from \KnownDlls\☆308Sep 28, 2022Updated 4 years ago
- laZzzy is a shellcode loader, developed using different open-source libraries, that demonstrates different execution techniques.☆507Jan 10, 2023Updated 3 years ago
- Lifetime AMSI bypass☆693Sep 26, 2023Updated 3 years ago
- PE obfuscator with Evasion in mind☆211Apr 25, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Revenant - A 3rd party agent for Havoc that demonstrates evasion techniques in the context of a C2 framework☆389Jul 30, 2024Updated 2 years ago
- A modern 32/64-bit position independent implant template☆1,375Jun 1, 2026Updated 5 months ago
- Shellcode Loader with Indirect Dynamic syscall Implementation , shellcode in MAC format, API resolving from PEB, Syscall calll and syscal…☆322Aug 2, 2023Updated 3 years ago
- A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.☆411Jan 11, 2026Updated 9 months ago
- This repo contains C/C++ snippets that can be handy in specific offensive scenarios.☆776Jan 26, 2025Updated last year
- Performing Indirect Clean Syscalls☆632May 2, 2026Updated 6 months ago
- Porting of BOF InlineExecute-Assembly to load .NET assembly in process but with patchless AMSI and ETW bypass using hardware breakpoint.☆307Jun 12, 2026Updated 4 months ago
- Cobalt Strike UDRL for memory scanner evasion.☆1,033Jun 4, 2024Updated 2 years ago
- This repo contains : simple shellcode Loader , Encoders (base64 - custom - UUID - IPv4 - MAC), Encryptors (AES), Fileless Loader (Winhttp…☆442Aug 2, 2023Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- CobaltWhispers is an aggressor script that utilizes a collection of Beacon Object Files (BOF) for Cobalt Strike to perform process inject…☆242Jan 4, 2023Updated 3 years ago
- WindowSpy is a Cobalt Strike Beacon Object File meant for automated and targeted user surveillance.☆285Feb 24, 2025Updated last year
- BOF implementation of @_EthicalChaos_'s ThreadlessInject project. A novel process injection technique with no thread creation, released a…☆400Jan 9, 2024Updated 2 years ago
- Encrypted shellcode Injection to avoid Kernel triggered memory scans☆432Sep 12, 2023Updated 3 years ago
- .NET assembly loader with patchless AMSI and ETW bypass☆393Apr 19, 2023Updated 3 years ago
- Various ways to execute shellcode☆518Mar 13, 2024Updated 2 years ago
- A workshop about Malware Development☆1,831Jun 2, 2023Updated 3 years ago
- Various methods of executing shellcode☆75Mar 27, 2023Updated 3 years ago
- A Dropper POC with a focus on aiding in EDR evasion, NTDLL Unhooking followed by loading ntdll in-memory, which is present as shellcode (…☆178Feb 10, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Curated resources for malware dev, reverse engineering, and defensive security research.☆1,865Updated this week
- Execute unmanaged Windows executables in CobaltStrike Beacons☆723Mar 4, 2023Updated 3 years ago
- Collection of various malicious functionality to aid in malware development☆1,957Feb 28, 2024Updated 2 years ago
- Collect Windows telemetry for Maldev☆513Aug 14, 2026Updated 2 months ago
- A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementin…☆542Aug 1, 2022Updated 4 years ago
- SysWhispers on Steroids - AV/EDR evasion via direct system calls.☆1,675Jul 31, 2024Updated 2 years ago
- ☆84Aug 18, 2022Updated 4 years ago
- Process hollowing injection technique for Red Team operations☆19Sep 18, 2023Updated 3 years ago
- An advanced in-memory evasion technique fluctuating shellcode's memory protection between RW/NoAccess & RX and then encrypting/decrypting…☆1,136Jun 17, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- PoC for a sleep obfuscation technique leveraging waitable timers to evade memory scanners.☆629Sep 26, 2023Updated 3 years ago
- This is a repository of resource about Malware techniques☆864Apr 8, 2023Updated 3 years ago
- FrostByte is a POC project that combines different defense evasion techniques to build better redteam payloads☆382Apr 16, 2022Updated 4 years ago
- Cobalt Strike User-Defined Reflective Loader with AV/EDR Evasion in mind☆496Jul 12, 2023Updated 3 years ago
- Threadless Process Injection using remote function hooking.☆824Sep 4, 2024Updated 2 years ago
- Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…☆316Sep 18, 2024Updated 2 years ago
- Win32 and Kernel abusing techniques for pentesters☆983Sep 3, 2023Updated 3 years ago