Code snippets for bare-metal malware development
☆99Feb 19, 2022Updated 4 years ago
Alternatives and similar repositories for BMJ
Users that are interested in BMJ are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A framework for easy payloads development and deployment, collection of customizable XSS payloads☆26Feb 20, 2022Updated 4 years ago
- Classic Bofa adapted to CobaltStrike.☆11Oct 4, 2022Updated 4 years ago
- ☆740Aug 23, 2026Updated 2 months ago
- Aggressor script that gets the latest commands from CobaltStrikes web site and creates an aggressor script based on tool options.☆23Oct 6, 2021Updated 5 years ago
- SPI flash read MitM attack PoC☆42May 24, 2022Updated 4 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Malware Development☆10Sep 30, 2020Updated 6 years ago
- Find kernel32 base and API addresses. Simple C++ implementation☆24Apr 7, 2022Updated 4 years ago
- Evasive ELF Static PIE User-Land-Exec featured in Tmpout Vol 1.☆30Sep 11, 2021Updated 5 years ago
- various slides and presentations I've worked on☆19Aug 25, 2026Updated 2 months ago
- Yet another Linux Rootkit☆16Oct 28, 2021Updated 5 years ago
- Code and notes regarding Malware Development☆11Oct 30, 2022Updated 4 years ago
- A variant of Gargoyle for x64 to hide memory artifacts using ROP only and PIC☆374May 24, 2022Updated 4 years ago
- Sustainable shellcode evasion☆118May 13, 2026Updated 5 months ago
- Predicting the probability of an exploit being released after a CVE is published (by Machine learning algorithm)☆13Aug 8, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- improving zerosums smbdoor - a silent remote backdoor which abuses undoc. APIs in srvnet.sys☆49Mar 10, 2023Updated 3 years ago
- An example of hijacking the dynamic linker with a custom interpreter who loads and executes modular viruses☆66Feb 24, 2022Updated 4 years ago
- AMSI detection PoC☆32Apr 14, 2020Updated 6 years ago
- Identify common attack paths to get Domain Administrator☆21Aug 20, 2019Updated 7 years ago
- One gate to all syscalls!☆23Mar 12, 2022Updated 4 years ago
- Cross-platform malware development library for anti-analysis techniques☆24Jul 27, 2021Updated 5 years ago
- Injects additional machine instructions into various binary formats.☆291Feb 3, 2024Updated 2 years ago
- ☆12Feb 23, 2015Updated 11 years ago
- A x64 Position Independent Proxy Enumerator Shellcode (PIPES)☆27Nov 14, 2025Updated 11 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A local LKM rootkit loader/dropper that lists available security mechanisms☆56Sep 4, 2021Updated 5 years ago
- encrypted-linux-kernel-modules☆13Nov 4, 2020Updated 5 years ago
- pwntools for go!☆12Jul 14, 2019Updated 7 years ago
- Protocol Reverse Engineering Resources☆22May 10, 2023Updated 3 years ago
- ☆18Mar 25, 2019Updated 7 years ago
- Binary Golf Library☆66May 1, 2021Updated 5 years ago
- A multi-staged malware that contains a kernel mode rootkit and a remote system shell.☆72May 20, 2021Updated 5 years ago
- Demystifying PatchGuard is a comprehensive analysis of Microsoft's security feature called PatchGuard, which is designed to prevent unaut…☆136Mar 16, 2026Updated 7 months ago
- bin2json extract recursively file, directory of files (or disk dump) metadata to json☆12Jul 7, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Simple Python Elgamal Encryption and Decryption Tool☆10Jan 7, 2020Updated 6 years ago
- Golang malware development library☆985Dec 13, 2024Updated last year
- Lazarus analysis tools and research report☆58Dec 22, 2023Updated 2 years ago
- Execute a payload at each right click on a file/folder in the explorer menu for persistence☆172Mar 15, 2023Updated 3 years ago
- A list of all the DLLs export in C:\windows\system32\☆221Dec 22, 2021Updated 4 years ago
- ☆29Aug 10, 2019Updated 7 years ago
- Upsilon execute shellcode with syscalls - no API like NtProtectVirtualMemory is used☆90Aug 26, 2021Updated 5 years ago