Vithor

StackSentry. Windows memory scanner for call stack spoofing detection, unbacked shellcode, injected DLLs and in-memory C2 implants.

Indirect-Syscalls. Indirect Syscalls Loader

Patch-Amsi. Bypassing amsi.dll via memory patch, simple code!

hell-code-loader. Simple Windows shellcode loader with interesting evasion tricks

Awesome-Malware-Blogs. A large collection of blogs 🦐

dr4ke-c2. A lightweight and easy-to-use C2 with a web interface. Built for simple usage and learning purposes.

RefinedPool. Thread Pool callback evasion using dynamic code cave injection.

hevd-kernel-exploitation. HEVD Process Killer - Kernel exploit for process termination via arbitrary write