maldev

⚠️ malware development

🔥📜 Forbidden collection of Red Team sorcery 📜🔥

Golang library for malware development

Slides & Code snippets for a workshop held @ x33fcon 2024

Reflective DLL Injection Made Bella

Swiss Army Knife for payload encryption, obfuscation, and conversion to byte arrays – all in a single command (14 output formats supported)! ☢️

Erebus is an Initial Access wrapper for the Mythic Command & Control Server. It converts shellcode into payloads specifically used for phishing and IA operations.

PolyEngine is an evasive PE packer designed for CTF challenges and low-level Windows security education. It focuses on bypassing EDR and AV heuristics through a layered stack of in-memory execution and obfuscation techniques.

Shellcode loader written in C and Assembly utilizing direct or indirect syscalls to evade UM EDR hooks

PIC shellcode (C/C++) development toolkit designed for malware developers.

A ring0 Loadable Kernel Module (Linux) for latest kernels 6.x

Creation of multiple Malware tools consisting of evasion, enumeration and exploitation

Advanced OPSEC fork of Donut. Features a Custom in-memory CLR Host, Tail-Jump ETW bypasses, and zero-patch AMSI evasion for stealthy shellcode generation.

In-memory hiding technique

Process Hollowing PoC

⚠️ Malware Development training ⚠️

Generate Secure, Polymorphic, Evasive (lol) Payloads

A cryptographic payload loader and executor designed for advanced in-memory execution techniques. This project combines strong encryption, compression, and sophisticated evasion capabilities to execute both shellcode and PE files directly in memory.

load arbitrary dlls, call any exported function, calls execute inside g0 as normal syscalls do from the traditional route, no syscall or windows imports, exposes many convenience functions for winapi interaction :3

Articles, White Papers, Technical Write-Ups and more authored by members of the GreySec community. Curated by staff, selected for excellence.