A VBA implementation of the RunPE technique or how to bypass application whitelisting.

Demos of various injection techniques found in malware

Run a Exe File (PE Module) in memory (like an Application Loader)

pure-python implementation of MemoryModule technique to load dll and unmanaged exe entirely from memory

ChimeraPE (a PE injector type - alternative to: RunPE, ReflectiveLoader, etc) - a template for manual loading of EXE, loading imports payload-side

Tool to evade Antivirus With Different Techniques

Hide malware behind a legit process C#

A cracked version of a private Runtime&Scantime crypter with an updating stub, lifetime license

Cronos Crypter is an simple example of crypter created for educational purposes.

Process Hollowing in C++ (x86 / x64) - Process PE image replacement

ZwProcessHollowing is a x64 process hollowing project which uses direct systemcalls, dll unhooking and RC4 payload decryption

execute a PE in the address space of another PE aka process hollowing

Simple protector to show how to run a payload without dropping it using RunPE Technique

Mystery Legacy Repo is for advanced penetration tools

Golang version of https://github.com/hasherezade/libpeconv

Nim process hollowing loader

RunPE using Hell's Gate technique.

A famous XWorm RAT. ✨The price is 20$✨All the popular RAT options, please read the description

Lime Crypter Obfuscator Mod

Software Protector