A post exploitation framework designed to operate covertly on heavily monitored environments

Open-Source Shellcode & PE Packer

bddisasm is a fast, lightweight, x86/x64 instruction decoder. The project also features a fast, basic, x86/x64 instruction emulator, designed specifically to detect shellcode-like behavior.

MD5-Monomorphic Shellcode Packer - all payloads have the same MD5 hash

AV Evasion Tool For Red Team Ops

Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".

VM一键加壳/脱壳，全压缩，反调试等

It bridges my research with a functional tool. I want to provide a safe, open-source framework for hackers to test evasion and for defenders to improve detection through hands-on learning.

An easily modifiable shellcode template for Windows x64 written in C

This novel way of using NtQueueApcThreadEx by abusing the ApcRoutine and SystemArgument[0-3] parameters by passing a random pop r32; ret gadget can be used for stealthy code injection.

A flexible PE loader, loading module in memory. Most of the functions can be inline, compatible for shellcode.

Java JNI HellsGate/HalosGate/TartarusGate/RecycledGate/SSN Syscall/Many Shellcode Loaders

FLARE Kernel Shellcode Loader

A small program written in C that is designed to load 32/64-bit shellcode and allow for execution or debugging. Can also output PE files from shellcode.

Contains Attack labs

A PICO for Crystal Palace that implements CLR hosting to execute a .NET assembly in memory.

Defense evasion collections and pentesting frameworks for assessment, following Greenbone and openVAS.

A personal collection of Windows CVE I have turned in to exploit source, as well as a collection of payloads I've written to be used in conjunction with these exploits.

PIC shellcode (C/C++) development toolkit designed for malware developers.

Boilerplate to develop raw and truly Position Independent Code (PIC).