Process Hollowing Injector (C)
C source code for shellcode injection via process hollowing. Creates a suspended process, unmaps the original section, and injects the payload.
Arsenal
Professional offensive security tools & exploit frameworks
120
Tools
12
Categories
Reflective DLL Injection Template
DLL template with integrated reflective loader. Loads into memory without touching disk or using LoadLibrary().
Python RAT Core Module
Core Remote Access Trojan module in Python. Encrypted communication, command execution, file transfer, and basic persistence.
Shellcode Encoder x86/x64
Shellcode encoder with 8 encoding schemes: XOR rolling, AES stub, RC4, SUB/ADD chain, insertion, shikata-ga-nai style.
Windows Rootkit Driver (KMDF)
Windows kernel driver (KMDF) with process, file, and network connection hiding capabilities. Includes usermode loader.
Keylogger Module (Win32 API)
Standalone keylogger module using SetWindowsHookEx. Captures keystrokes, identifies active window, saves to encrypted log.
PE Packer/Crypter Source
Packer/crypter source code for PE executables. Encrypts the .text section, adds decryption stub, modifies entry point.
Fileless Malware Loader (PowerShell)
PowerShell loader that downloads and executes payload in memory without writing to disk. AMSI bypass included.
C2 Communication Protocol Library
Python/C library for C2 communication over HTTP/S, DNS, and ICMP. Custom protocol with encryption and steganography.
Persistence Techniques Cookbook (Windows)
10 Windows persistence techniques implemented in code: Registry, Scheduled Tasks, WMI Events, COM Hijack, DLL Search Order, and more.