Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

Template-Driven AV/EDR Evasion Framework

Advanced Game Hacking Library for C, Modern C++, Rust and Python (Windows/Linux/FreeBSD) (Process/Memory Hacking) (Hooking/Detouring) (Cross Platform) (x86/x64) (DLL/SO Injection) (Internal/External) (Assembler/Disassembler)

📦 Plugin, App, and Theme store which includes plugin injection for macOS

Multilayered AV/EDR Evasion Framework (no longer actively maintained)

Historical Windows temporal memory-state research artifact for studying time-bound memory observations, validation limits, and defensive visibility.

Demos of various injection techniques found in malware

Library for injecting a shared library into a Linux or Windows process

Transacted Hollowing - a PE injection technique, hybrid between ProcessHollowing and ProcessDoppelgänging

PE Injection、DLL Injection、Process Injection、Thread Injection、Code Injection、Shellcode Injection、ELF Injection、Dylib Injection, including 400+Tools and 350+posts

Loader for VAC Bypass written in C.

Sysmodule for injecting custom codes into retail Nintendo Switch games.

A set of tutorials about code injection for Windows.

MIP – macOS Injection Platform

Search for code cave in all binaries

x64 Windows kernel driver mapper, inject unsigned driver using anycall

Automatic generate dll wrapper for code injection.

Injecting code by recompiling shellcode into a ROP chain.

A proper approach to pentest a Web application with the mixture of all useful payloads and complete testing guidance of attacks. Designed as a quick reference cheat sheet for your pentesting and bug bounty engagement.

ARTist's core implementation meant to be included in the art project. Provides ARTist APIs and boilerplate code for modules.