⚠️ malware development

Golang library for malware development

Slides & Code snippets for a workshop held @ x33fcon 2024

Reflective DLL Injection Made Bella

Malleable shellcode loader written in C and Assembly utilizing direct or indirect syscalls for evading EDR hooks

In-memory hiding technique

Process Hollowing PoC

⚠️ Malware Development training ⚠️

Articles, White Papers, Technical Write-Ups and more authored by members of the GreySec community. Curated by staff, selected for excellence.

Generate Secure, Polymorphic, Evasive Payloads

go-native-syscall is Go (+ asm) Windows syscall library that resolves, hashes, caches, and invokes direct (and indirect now) NT calls without going through the win api layer traditionally

XMRig Service Installer: An automation tool to swiftly set up the xmrig mining software as a background service on Windows. Designed for educational and research purposes, it streamlines the miner's installation and offers an easy way to run xmrig on-demand.

ECX and eMLR Malware research, Studying mydoom Malware EXECUTION

Shellcode loader/injector generator

This is a personal project designed to immerse me in the world of malware development. This will enable me to gain a better understanding of how malware works, and to learn more about operating systems.

A cryptographic payload loader and executor designed for advanced in-memory execution techniques. This project combines strong encryption, compression, and sophisticated evasion capabilities to execute both shellcode and PE files directly in memory.

Library for useful malware related remote control capabilities.

Control and Command Server (c2) written in Rust.

Simple Windows shellcode executor