Projects sharing features with PEzor

macOS Initial Access Payload Generator

Shhhloader is a work in progress shellcode loader. It takes raw shellcode as input and compiles a C++ stub that does a bunch of different things to try and bypass AV/EDR. The included python builder will work on any Linux system that has Mingw-w64 installed.

A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA scripts. The current gadget triggers a call to Activator.CreateInstance() when deserialized using BinaryFormatter from jscript/vbscript/vba, this…

To view the latest version of Ivy or to submit an issue, reference https://github.com/Tylous/Ivy.

A Proof of Concept for weaponizing SysWhispers for making direct system calls in Cobalt Strike Beacon Object File.

MSBuild Without MSBuild.exe

A tool to abuse Exchange services

Proof-of-concept obfuscation toolkit for C# post-exploitation tools. This will perform the below actions for a C# visual studio project.

Dendrobate is a framework that facilitates the development of payloads that hook unmanaged code through managed .NET code. To do this Dendrobate uses EasyHook and packs the injected component, Dendron, using Fody & Costura . This is all done automatically so all you need to do when you compile…

Store and execute an encrypted windows binary from inside memory, without a single bit touching disk.

generate CobaltStrike's cross-platform payload

c++ fully undetected shellcode launcher ;)

:triangularflagon_post: This is the public repository of Inceptor, for latest version and updates please consider supporting us through https://porchetta.industries/

evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

To view the latest version of Freeze or to submit an issue, reference https://github.com/Tylous/Freeze.

To view the latest version of ScareCrow or to submit an issue, reference https://github.com/Tylous/ScareCrow.

Reflective PE packer.

SharpSploit is a .NET post-exploitation library written in C# that aims to highlight the attack surface of .NET and make the use of offensive .NET easier for red teamers.

Tiny Excel BIFF8 Generator, to Embedded 4.0 Macros in *.xls

This project is a post-exploitation framework and command and control platform designed for security research and penetration testing. It functions as a remote access tool consisting of a central command server and encrypted executable payloads that establish reverse shell connections. The system utilizes a web-based dashboard for multi-client administration, allowing for remote host monitoring and direct shell access through an in-browser terminal. It generates cross-platform, encrypted binaries that employ a multi-stage delivery chain and a key exchange mechanism to secure communications.

` | ' \ / | ' \ / \ \ /\ / / | |) | (| | |) | (| |\ V V / | ./ \,| ./ \,| \/\/ || |_| `

A proof-of-concept packer for .NET executables, designed to provide a starting point to explain the basic principles of runtime packing.

Midgetpack ~-~-~-~-~- aris@badcode.be

ELF runtime packer for creating self-protecting binaries