oXis

awesome-oss-alternatives

Awesome list of open-source startup alternatives to well-known SaaS products 🚀

MalwareSourceCode

Collection of malware source code for a variety of platforms in an array of different programming languages.

Havoc

The Havoc Framework.

zydis

Fast and lightweight x86/x86-64 disassembler and code generation library

pe_to_shellcode

Converts PE into a shellcode

Pentest-Tools

aleph

Search and browse documents and data; find the people and companies you look for.

InstallerFileTakeOver

inceptor

Template-Driven AV/EDR Evasion Framework

AlternativeShellcodeExec

Alternative Shellcode Execution Via Callbacks

OffensiveVBA

This repo covers some code execution and AV Evasion methods for Macros in Office documents

Ivy

Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by utilizing programmatical access in the VBA object environment to load, decrypt and execute shellcode.

ShellcodeTemplate

An easily modifiable shellcode template for Windows x64/x86

AtomPePacker

A Highly capable Pe Packer

SilentMoonwalk

PoC Implementation of a fully dynamic call stack spoofer

HandleKatz

PIC lsass dumper using cloned handles

metame

metame is a metamorphic code engine for arbitrary executables

TerraLdr

A Payload Loader Designed With Advanced Evasion Features

Skrull

Skrull is a malware DRM, that prevents Automatic Sample Submission by AV/EDR and Signature Scanning from Kernel. It generates launchers that can run malware on the victim using the Process Ghosting technique. Also, launchers are totally anti-copy and naturally broken when got submitted.

Ninja_UUID_Runner

Module Stomping, No New Thread, HellsGate syscaller, UUID Shellcode Runner for x64 Windows 10!

akamai-security-research

This repository includes code and IoCs that are the product of research done in Akamai's various security research teams.

Unwinder

Call stack spoofing for Rust

Pachine

Python implementation for CVE-2021-42278 (Active Directory Privilege Escalation)

Awesome-Binary-Rewriting

An awesome & curated list of binary rewriting papers

OSEE

Collection of resources for my preparation to take the OSEE certification.

COFFLoader2

Load and execute COFF files and Cobalt Strike BOFs in-memory

IORI_Loader

UUID shellcode Loader with dynamic indirect syscall implementation, syscall number/instruction get resolved dynamicaly at runtime, and the syscall number/instruction get unhooked using Halosgate technique. Function address get resolved from the PEB by offsets and comparaison by hashes

RustChain

Hide memory artifacts using ROP and hardware breakpoints.

0xpat.github.io

0xpat blog

kdbg-driver-vagrant