Reflective DLL Injection Made Bella

Deploy stealthy reverse shells using advanced process hollowing with GhostStrike – a C++ tool for ethical hacking and Red Team operations.

not a reverse-engineered version of the Cobalt Strike Beacon

A C/C++ framework designed to simplify shellcode creation on any compilers and platforms using C. Supports Windows & Linux, and practically any existing architecture.

红队 C2 框架，使用 No X Loader 技术。Red Team C2 Framework, using No X Loader technology.

Simple Windows shellcode executor

无可执行权限加载 ShellCode。Loading ShellCode without executable permission.

Tools for interacting with authentication packages using their individual message protocols

Damn Vulnerable UEFI

shell code example

CVM is a header-only turing-complete virtual machine engine made in pure C.

C++ Staged Shellcode Loader with Evasion capabilities.

Command and Control

Native code virtualizer for x64 binaries

the bear is an infostealer (grabber) malware written in C and assembly with the focus on evading detection.

Modular penetration testing platform that enables you to write, test, and execute exploit code.

TeamServer and Client of Exploration Command and Control Framework

Achieve arbitrary kernel read/writes/function calling in Hypervisor-Protected Code Integrity (HVCI) protected environments calling without admin permissions or kernel drivers.

Patching "signtool.exe" to accept expired certificates for code-signing.

Windows C++ Implant for Exploration C2

Library for lifting machine code to LLVM bitcode

Process injection alternative

A sophisticated, covert Windows-based credential dumper using C++ and MASM x64.

My own unique conceptual implementation of technique called HVNC (Hidden VNC or sometimes also Hidden Desktop).

Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework

Implementation of process sandboxing in c++, elevates to SYSTEM via impersonation, if required and strips all privileges from process of your will.

Process information enumeration concept with usage of native functions.

Export not exported private key

Keystone assembler framework: Core (Arm, Arm64, Hexagon, Mips, PowerPC, Sparc, SystemZ & X86) + bindings