A protective and Low Level Shellcode Loader that defeats modern EDR systems.
-
Updated
Mar 20, 2024 - C
#
shellcode-loader
Here are 42 public repositories matching this topic...
助力每一位RT队员，快速生成免杀木马
-
Updated
Apr 17, 2024 - C
MD5-Monomorphic Shellcode Packer - all payloads have the same MD5 hash
-
Updated
Sep 30, 2022 - C
Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".
workshop shellcode syscalls malware-analysis malware-development shellcode-loader antivirus-evasion windows-internals edr-bypass edr-evasion antivirus-bypass malware-development-guide direct-syscalls indirect-syscalls
-
Updated
May 23, 2025 - C
Fritter is a heavily modified fork of TheWover and Odzhan's Donut shellcode generator.
-
Updated
Aug 4, 2026 - C
The following two code samples can be used to understand the difference between direct syscalls and indirect syscalls
shellcode-loader av-evasion av-bypass windows-int edr-bypass edr-evasion direct-syscalls indirect-syscalls
-
Updated
Jan 20, 2024 - C
Java JNI HellsGate/HalosGate/TartarusGate/RecycledGate/SSN Syscall/Many Shellcode Loaders
-
Updated
Jul 7, 2023 - C
Shellcode packer for CTFs and pentest / red team exams aiming for AV evasion!
packer shellcode shellcode-loader antivirus-evasion loader-generator antivirus-bypass shellcode-runner evasion-techniques
-
Updated
Apr 4, 2026 - C
Shellcode loader written in C and Assembly utilizing direct or indirect syscalls to evade UM EDR hooks
windows dll msvc malware-development shellcode-loader native-api process-injection ntapi shellcode-injection payload-encryption edr-bypass edr-evasion maldev dll-sideloading api-hashing direct-syscalls indirect-syscalls iat-camouflage
-
Updated
Dec 22, 2024 - C
ApexLdr is a DLL Payload Loader written in C
malware loader threadpool shellcode-loader av-evasion av-bypass red-teaming dll-unhooking dll-sideloading indirect-syscall
-
Updated
Jul 17, 2024 - C
A stealthy and modular Windows loader designed to bypass modern EDR solutions using Module Stomping, Stack Duplication, and Advanced Sleep Obfuscation.
win32api malware-development red-team shellcode-loader edr-evasion module-stomping sleep-obfuscation zilean proxyapi stealth-loader
-
Updated
Jul 26, 2026 - C
Various methods of executing shellcode
-
Updated
Mar 27, 2023 - C
PE .exe packer and manual loader for Windows with compression, encryption, and much more
c windows compression packer winapi loader file-compressor upx shellcode pe-format portable-executable pe-loader reflective-injection shellcode-loader protector reflective-pe-loaders thread-local-storage pe-packer manual-mapper reflective-loading
-
Updated
Sep 5, 2025 - C
该项目为Shellocde加载器，详细介绍了我们如何绕过防病毒软件，以及该工具如何使用
-
Updated
Oct 24, 2022 - C
Python based tool for generating Shellcode from PIC C
-
Updated
Nov 6, 2025 - C
arm64 linux position-independent shellcode framework
-
Updated
Dec 12, 2025 - C
A list of shellcode and loader, tools for C2 and malware analysis, designed to create shellcode and evade antivirus software such as Windows Defender, Avira, and McAfee
-
Updated
Jul 4, 2026 - C
Linux Rootkit (x86-64 / ARM64) that stealth hides processes, files, and sockets, hooks syscalls, encrypts traffic, and bypasses SELinux / AppArmor.
kernel backdoor persistence injector elf pie apparmor selinux shellcode-loader av-evasion linux-rootkit stealth-hides-processes hooks-syscalls encrypts-traffic
-
Updated
Aug 24, 2025 - C
Polymorphic x64 shellcode loader — indirect syscalls, phantom DLL hollowing, call stack spoofing, patchless AMSI/ETW bypass, zero CRT dependency
-
Updated
May 24, 2026 - C
Add this topic to your repo
To associate your repository with the shellcode-loader topic, visit your repo's landing page and select "manage topics."