A cross-platform C++ framework for building Windows shellcode
☆178Apr 21, 2026Updated 2 months ago
Alternatives and similar repositories for scfw
Users that are interested in scfw are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Bring your own Unwind Data Framework☆156Mar 15, 2026Updated 4 months ago
- Windows User-Mode Shellcode Development Framework (WUMSDF)☆144Updated this week
- PIC shellcode (C/C++) development toolkit designed for malware developers.☆129Dec 23, 2025Updated 6 months ago
- Harness to issue Virtual Secure Mode (VSM) "secure calls" from VTL 0 to VTL 1☆80Sep 8, 2025Updated 10 months ago
- A C++ REPL for IDA Pro / IDA C++ SDK☆97Mar 26, 2026Updated 3 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Set of PoC to abuse Windows minifilters functionality☆93May 1, 2026Updated 2 months ago
- Linux Process Injection via Seccomp Notifier☆95Dec 9, 2025Updated 7 months ago
- LLVM based devirtualizer for the binaryshield software protector.☆81May 7, 2026Updated 2 months ago
- x64 PE bin2bin obfuscator which doesn't add a section to the binary☆285Updated this week
- Windows Access token manipulation tool made in C#☆25Aug 24, 2025Updated 10 months ago
- Evasion by machine code de-optimization.☆428Jul 22, 2024Updated last year
- Implementing Ghostly-Hollowing using tampered syscalls for remote PE injection☆74Dec 26, 2025Updated 6 months ago
- A small experiment on assigning a processes threads a specific CPU and then blocking it with a high priority thread☆33Sep 24, 2025Updated 9 months ago
- ☆56Mar 26, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A bin2bin code virtualizer for x86-64 PE's☆159Jun 6, 2026Updated last month
- A unique introduction to native runtime obfuscation.☆73Mar 2, 2025Updated last year
- Admin to Kernel code execution using the KSecDD driver☆268Apr 19, 2024Updated 2 years ago
- Cobalt Strike BOF to obtain location data☆26Jul 4, 2026Updated last week
- Allocation-free move-only alternative to std::function for C++17☆13Feb 6, 2021Updated 5 years ago
- Compile-time Evaluable SHA3 in C++: Permutation-based Cryptographic Hashing☆16Jun 22, 2026Updated 3 weeks ago
- Find jmp gadgets for call stack spoofing.☆84Oct 1, 2025Updated 9 months ago
- Slaying multi-language LLVM IR with obfuscation passes to achieve JIT execution☆136Dec 24, 2025Updated 6 months ago
- PowerShell module for mapping byte offsets to source context and locating AMSI or Microsoft Defender detection boundaries in text and bin…☆35Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- open source implementation of the UDC2 spec used in Cobalt Strike☆54Jul 4, 2026Updated last week
- A guide to modern exploit development, shellcode, EDR and WAF bypass, and initial Red Team access.☆30Mar 6, 2026Updated 4 months ago
- Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)☆16Sep 4, 2020Updated 5 years ago
- Injecting code by recompiling shellcode into a ROP chain.☆146Apr 21, 2026Updated 2 months ago
- Polymorphic PE rewriter for Windows x64 , rewrites binaries into semantically identical but byte-different variants☆192Jun 6, 2026Updated last month
- PoC code for IsValidImageCRC()☆25May 3, 2023Updated 3 years ago
- takes shellcode bad-bytes and banishes them, returning cleaned shellcode with preserved functionalities☆62Mar 1, 2026Updated 4 months ago
- Vectored Exception Handling Squared☆30Dec 27, 2025Updated 6 months ago
- WinHvShellcodeEmulator (WHSE) is a shellcode emulator leveraging the Windows Hypervisor Platform API☆25Apr 24, 2022Updated 4 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- BYOVD: Use 360 WFP driver to block EDR/XDR network connection.☆128Feb 10, 2026Updated 5 months ago
- Tools for attacking Computer Use Agents☆33Jan 16, 2026Updated 5 months ago
- Stack spoofing Detection for CET processes by comparing shadow and user stacks.☆36May 22, 2026Updated last month
- A compiled language for Windows position-independent x86-64 shellcode and Beacon Object Files.☆170Jun 28, 2026Updated 2 weeks ago
- early cascade injection PoC based on Outflanks blog post, in rust☆64Nov 8, 2024Updated last year
- MicroVM is a self-guided path for learning how computers work by building a tiny virtual machine.☆25May 3, 2026Updated 2 months ago
- Boilerplate to develop raw and truly Position Independent Code (PIC).☆117Jan 20, 2025Updated last year