Shellcode Compiler
☆1,151Sep 1, 2024Updated last year
Alternatives and similar repositories for ShellcodeCompiler
Users that are interested in ShellcodeCompiler are comparing it to the libraries listed below
Sorting:
- Converts PE into a shellcode☆2,752Aug 30, 2025Updated 6 months ago
- An extensible framework for easily writing compiler optimized position independent x86 / x64 shellcode for windows platforms.☆533Jul 2, 2025Updated 8 months ago
- Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode☆2,511Nov 15, 2023Updated 2 years ago
- ☆408Mar 1, 2017Updated 9 years ago
- Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…☆4,491Jul 8, 2025Updated 8 months ago
- AV/EDR evasion via direct system calls.☆1,999Jan 1, 2023Updated 3 years ago
- Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loadi…☆3,243Sep 3, 2022Updated 3 years ago
- 使用纯C/C++编写的ShellCode生成框架☆452May 25, 2019Updated 6 years ago
- Universal Unhooking☆326Sep 19, 2018Updated 7 years ago
- Phantom DLL hollowing PoC☆372May 23, 2022Updated 3 years ago
- A memory scanning evasion technique☆901May 24, 2017Updated 8 years ago
- Open-Source Shellcode & PE Packer☆2,074Feb 3, 2024Updated 2 years ago
- shellcodeloader☆1,746Dec 11, 2020Updated 5 years ago
- NetRipper - Smart traffic sniffing for penetration testers☆1,387Jun 17, 2022Updated 3 years ago
- Load/Inject .NET assemblies by; reusing the host (spawnto) process loaded CLR AppDomainManager, Stomping Loader/.NET assembly PE DOS head…☆596Jul 26, 2021Updated 4 years ago
- An improvement of the original reflective DLL injection technique by Stephen Fewer of Harmony Security☆341Jul 30, 2017Updated 8 years ago
- Obfuscate specific windows apis with different apis☆1,022Feb 21, 2021Updated 5 years ago
- A modified RunPE (process hollowing) technique avoiding the usage of SetThreadContext by appending a TLS section which calls the original…☆97Sep 26, 2019Updated 6 years ago
- SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature…☆1,260Aug 27, 2023Updated 2 years ago
- Syscall Monitor is a system monitor program (like Sysinternal's Process Monitor) using Intel VT-X/EPT for Windows7+☆748Jun 26, 2017Updated 8 years ago
- A more stealthy variant of "DLL hollowing"☆363Mar 8, 2024Updated 2 years ago
- Fast Conversion Windows Dynamic Link Library To ShellCode☆421Mar 10, 2022Updated 4 years ago
- Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.☆6,885Mar 1, 2026Updated 2 weeks ago
- InfectPE - Inject custom code into PE file [This project is not maintained anymore]☆327Apr 26, 2017Updated 8 years ago
- Examples of leaking Kernel Mode information from User Mode on Windows☆634Jul 7, 2017Updated 8 years ago
- Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation fr…☆1,203Jun 17, 2022Updated 3 years ago
- Adaptive DLL hijacking / dynamic export forwarding☆807Jul 6, 2020Updated 5 years ago
- An advanced in-memory evasion technique fluctuating shellcode's memory protection between RW/NoAccess & RX and then encrypting/decrypting…☆1,096Jun 17, 2022Updated 3 years ago
- C/C++ source obfuscator for antivirus bypass☆1,065Mar 10, 2022Updated 4 years ago
- PowerLoaderEx - Advanced Code Injection Technique for x32 / x64☆382Apr 17, 2017Updated 8 years ago
- Library to load a DLL from memory.☆3,115Jan 3, 2024Updated 2 years ago
- A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!☆1,401Nov 22, 2023Updated 2 years ago
- proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC☆1,274May 1, 2024Updated last year
- Windows memory hacking library☆5,361Jan 26, 2024Updated 2 years ago
- Windows Event Log Killer☆1,813Sep 21, 2023Updated 2 years ago
- A PoC implementation for spoofing arbitrary call stacks when making sys calls (e.g. grabbing a handle via NtOpenProcess)☆559Apr 8, 2025Updated 11 months ago
- A library to load, manipulate, dump PE files. See also: https://github.com/hasherezade/libpeconv_tpl☆1,340Mar 7, 2026Updated last week
- Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)☆824Mar 10, 2022Updated 4 years ago
- SuperDllHijack：A general DLL hijack technology, don't need to manually export the same function interface of the DLL, so easy! 一种通用Dll劫持技…☆1,018Nov 10, 2021Updated 4 years ago