IronPE is a Windows PE manual loader written in Rust for both x86 and x64 PE files.
☆124Mar 10, 2026Updated 7 months ago
Alternatives and similar repositories for IronPE
Users that are interested in IronPE are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A C# PE loader for x64 and x86 PE files.☆56Mar 9, 2026Updated 7 months ago
- Fritter is a heavily modified fork of TheWover and Odzhan's Donut shellcode generator.☆260Aug 4, 2026Updated 2 months ago
- Elfina is a multi-architecture ELF loader written in Rust, supporting x86 and x86-64 binaries.☆53Mar 15, 2026Updated 7 months ago
- Rust Based PE & Shellcode Packer☆47Dec 28, 2025Updated 10 months ago
- Modern PIC implant for Windows (64 & 32 bit)☆103Jul 23, 2025Updated last year
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Reflective x64 Loader written in C/ASM☆15Dec 2, 2025Updated 10 months ago
- Shellcode loader using direct syscalls via Hell's Gate and payload encryption.☆139Jun 16, 2024Updated 2 years ago
- Polymorphic PE rewriter for Windows x64 , rewrites binaries into semantically identical but byte-different variants☆201Jun 6, 2026Updated 4 months ago
- Stealthy In-Memory Local Password Harvester (SILPH) tool: dump LSA, SAM and DCC2 with indirect syscall☆168Dec 17, 2025Updated 10 months ago
- Phantom-Evasion-Loader is a standalone, pure x64 Assembly injection engine engineered to minimize the detection surface of modern EDR/XDR…☆116Aug 8, 2026Updated 2 months ago
- **CVE-2026-2636** is a vulnerability in the Windows Common Log File System (CLFS) driver (`CLFS.sys`). An unprivileged user can trigger a…☆16Feb 26, 2026Updated 8 months ago
- A CET-compatible Windows x64 loader that produces fully backed call stacks through runtime function table manipulation, code cave injecti…☆134Sep 6, 2026Updated last month
- Sh3ller is a lightweight C2 framework in its simplest form.☆33Sep 5, 2025Updated last year
- Implementing Ghostly-Hollowing using tampered syscalls for remote PE injection☆77Dec 26, 2025Updated 10 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A stealthy stager designed for shellcode payloads staged with http/https like Sliver, or on github raw.☆64Jul 20, 2026Updated 3 months ago
- AV/EDR processes termination by exploiting a vulnerable driver (BYOVD)☆302Jan 21, 2026Updated 9 months ago
- Fairy Law - Compromise or disable EDR security solutions☆80Dec 1, 2025Updated 10 months ago
- A robust Windows Process Executable Packer and Launcher implementation written in Rust for Windows x64 systems.☆53Jan 9, 2025Updated last year
- RunPE implementation with multiple evasive techniques (2)☆288Sep 25, 2025Updated last year
- Stealthily inject shellcode into an executable☆485Oct 19, 2025Updated last year
- Automated DLL Hijacking Discovery, Validation, and Confirmation. Turning local misconfigurations into weaponized, confirmed attack paths.☆410Sep 17, 2026Updated last month
- .NET CLR-Stomping☆148May 20, 2026Updated 5 months ago
- Rust C2 agent for Mythic that produces polymorphic shellcode: per-build function shuffle + ChaCha20-encrypted data sections; no_std/no_ma…☆75May 13, 2026Updated 5 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- COM Windows Persistence Technique☆90Apr 27, 2026Updated 6 months ago
- Dockerized template to build CS BOFs using clang-cl☆26Jan 29, 2026Updated 9 months ago
- some research on EDR deconditioning☆16Jun 4, 2026Updated 4 months ago
- Automated Pass-the-Ticket (PtT) attack. Standalone alternative to Rubeus and Mimikatz for this attack. In C#, C++, Crystal, Python, Rust,…☆155Aug 31, 2026Updated last month
- Remote BOF Runner is a Havoc extension framework for remote execution of Beacon Object Files (BOFs) using a PIC loader made with Crystal …☆102Jan 2, 2026Updated 9 months ago
- Rust crate to obfuscate strings and byte arrays so they are not in memory when not in use.☆21Apr 30, 2026Updated 6 months ago
- Nim implementation for sud0Ru's Credential Dumping from SAM/SECURITY Hives Method (a.k.a. SilentHarvest)☆108Apr 4, 2026Updated 6 months ago
- Generate DLL proxy/sideload projects. Automatically parses PE export tables and generates ready-to-compile project for red team engagemen…☆171Sep 13, 2026Updated last month
- Just another EDR killer☆142Jan 21, 2026Updated 9 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Call Stack Spoofing for Rust☆223Jan 28, 2026Updated 9 months ago
- Windows Error Reporting ALPC Elevation of Privilege (CVE-2026-20817) - Proof-of-Concept exploit demonstrating local privilege escalation …☆132Feb 19, 2026Updated 8 months ago
- A Beacon Object File (BOF) that performs the complete ESC1 attack chain in a single execution: certificate request with arbitrary SAN (+S…☆119Dec 21, 2025Updated 10 months ago
- PolyEngine is an evasive PE packer designed for CTF challenges and low-level Windows security education. It focuses on bypassing EDR and …☆165Aug 6, 2026Updated 2 months ago
- Hells Hollow Windows 11 Rootkit technique to Hook the SSDT via Alt Syscalls☆294Jul 13, 2026Updated 3 months ago
- Remote DLL Injection with Timer-based Shellcode Execution☆214Jul 18, 2025Updated last year
- Print the stack trace☆50Mar 8, 2026Updated 7 months ago