Piclang is statically typed programming language that compiles to raw position-independent x86-64 shellcode, purpose-built for development of red-team implants.
☆28Jul 23, 2026Updated 2 months ago
Alternatives and similar repositories for Piclang
Users that are interested in Piclang are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Authenticode signature manipulation toolkit for Red Team operations and security research. Covers signature stealing, metadata cloning, S…☆140Aug 13, 2026Updated 2 months ago
- A Position Independent Code (PIC) implementation of the execute-assembly command, using Crysta Palace linker.☆22Oct 4, 2026Updated 2 weeks ago
- Evasion kit for Cobalt Strike☆17Aug 13, 2026Updated 2 months ago
- RISC-V VM based shellcode loader PoC - Still WIP☆38Aug 1, 2026Updated 2 months ago
- Malware as a Service Ludus Range☆129Sep 24, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Proof of Concept for Process Code Injection Without Using WriteProcessMemory☆151Sep 27, 2026Updated 3 weeks ago
- Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal☆57Sep 15, 2026Updated last month
- Drop any Windows DPAPI artifact and it identifies the format and the exact master key it needs, then decrypts once you supply the key. Of…☆31Sep 23, 2026Updated 3 weeks ago
- File hosting and scripted web delivery service extender for AdaptixC2. Host files over HTTP/HTTPS, generate one-liner payloads across 17 …☆36Aug 24, 2026Updated last month
- another PrivEsc potato...☆121Sep 5, 2026Updated last month
- A litterbox integration for the Mythic Command and Control Server☆21Sep 14, 2026Updated last month
- Cobalt Strike BOF that extracts selected Windows registry hives directly from a raw NTFS volume by parsing NTFS metadata and reading file…☆110Oct 11, 2026Updated last week
- A Proof of Concept demonstrating CET-compliant callstack spoofing in Rust. It leverages Windows Thread Pool and Enum Callback trampolinin…☆68Jul 12, 2026Updated 3 months ago
- Active Directory snapshots from Linux and macOS in the AD Explorer .dat format. Opens in AD Explorer, works with ADExplorerSnapshot.py an…☆37Sep 11, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- One-pass anonymous Active Directory enumeration over SAMR and LSARPC — null session, no credentials, with structured reusable output.☆69Sep 17, 2026Updated last month
- OneDrive as a covert C2 transport for Cobalt Strike☆77Sep 19, 2026Updated last month
- Post-ex tool to interact with chromium browser when CDP is enabled☆47May 15, 2026Updated 5 months ago
- A collection of DPAPI hunting and parsing BOFs☆39Mar 3, 2026Updated 7 months ago
- Mythic C2 agent with a full in-memory BOF loader for macOS and Linux☆107Sep 16, 2026Updated last month
- Hades is a fully-featured cross-platform Chrome Extension agent. Hades is designed for Mythic 3.0 and newer.☆49Aug 12, 2026Updated 2 months ago
- A CET-compatible Windows x64 loader that produces fully backed call stacks through runtime function table manipulation, code cave injecti…☆134Sep 6, 2026Updated last month
- Sleep replacement that executes real, varied work to break behavioral pattern matching by EDR and anti-cheat systems☆88Jul 20, 2026Updated 2 months ago
- ☆93Aug 5, 2026Updated 2 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A collection of techniques for process injection on Windows☆104Aug 16, 2026Updated 2 months ago
- open source implementation of the UDC2 spec used in Cobalt Strike☆61Jul 4, 2026Updated 3 months ago
- A poor man's attempt to replicate the shellcode execution technique demo'd by @3lk during STHACK 2026 (https://www.youtube.com/watch?v=al…☆24Updated this week
- BingusLdr is a DLL loader built with Crystal Palace that uses a CET compatible stack spoofing technique.☆116Jul 14, 2026Updated 3 months ago
- A listener profile for the Mythic C2 framework that utilizes AI vendors file API's☆30Oct 2, 2026Updated 2 weeks ago
- Another Injection Technique which eliminates creations of thread in remote process☆28Jul 7, 2026Updated 3 months ago
- A PoC UDRL for Cobalt Strike built with Crystal Palace that combines Raphael Mudge's page streaming technique with a modular call gate (D…☆141Jan 21, 2026Updated 8 months ago
- BOF exploiting the Visual Studio Installer Elevation Service for SYSTEM LPE and persistence via AppDomainManager hijacking, with native E…☆88Aug 5, 2026Updated 2 months ago
- Ditto is a Windows Mythic Agent for Chroimium Browsers that utilizes Chromium extensions as its base agent with optional sidecar attachme…☆32Updated this week
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆46Jul 1, 2026Updated 3 months ago
- Demonstration of the DLL party process injection technique☆87Oct 1, 2026Updated 2 weeks ago
- Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-writ…☆108Aug 16, 2026Updated 2 months ago
- ☆37May 19, 2026Updated 5 months ago
- Sleep Obfuscation via CreateThreadpoolTimer☆24Jul 27, 2026Updated 2 months ago
- A cmake template for crystal palace☆49Dec 20, 2025Updated 9 months ago
- BOF and research notes from hunting execution paths, covering Shell.HWEventHandlerShellExecute COM execution through the AutoPlay IHWEven…☆39Jun 20, 2026Updated 3 months ago