forkhelpburn / rpocket-Shellcode-Memory-Fluctuation

Advanced memory evasion PoC that cyclically encrypts shellcode and fluctuates between RW/NoAccess and RX memory protections to bypass memory scanners like Moneta and PE-Sieve.

SelfGeckoBoiler / rpocket-team-Python-Memory-Forge

Far Cry 3 Memory Editor Python Script 2026: Modify Health, Money, Ammo and Items

Gallopsled / pwntools

CTF framework and exploit development library

SnailSploit / Claude-Red

claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.

trustedsec / unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

bitdefender / bddisasm

bddisasm is a fast, lightweight, x86/x64 instruction decoder. The project also features a fast, basic, x86/x64 instruction emulator, designed specifically to detect shellcode-like behavior.

buffer / thug

Python low-interaction honeyclient

modernish / modernish

Modernish is a library for writing robust, portable, readable, and powerful programs for POSIX-based shells and utilities.

Joe1sn / S-inject

支持x86/x64的DLL和Shellcode 的Windows注入的免杀工具，支持图形化界面

winterknife / PLATINUMPICK

Windows Kernel-Mode Shellcode Development Framework (WKMSDF)

zarkones / Piclang

Piclang is statically typed programming language that compiles to raw position-independent x86-64 shellcode, purpose-built for development of red-team implants.