Jormungandr

Jormungandr Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel. The only supported type of COFF is an x64 kernel COFF meaning, a COFF that uses functions from either NTOSKRNL or SSDT. This project is not supported to r...

hades

À propos Hades est un loader de preuve de concept qui combine plusieurs techniques d'évasion dans le but de contourner les mécanismes défensifs couramment utilisés par les AV/EDR modernes. Utilisation La façon la plus simple est probablement de construire le projet sur Linux en utilisant make. gi...

Percino

Percino Evasive Golang Loader Percino is a Golang loader that execute shellcode utilizing the process hollowing technique with anti-sandbox and anti-analysis measures. The shellcode is encrypted with the Triple DES 3DES encryption algorithm. Full EDR bypass with any C2 Framework. Tested with Coba...

CVE-2022-29464

CVE-2022-29464 LOADER Install and execute the app on the server user@domain: pip3 install colored user@domain: git clone https://github.com/sh4den/CVE-2022-29464-loader.git user@domain: cd ./CVE-2022-29464-loader/ user@domain: python3 main.py Disclamer This repository is for academic purposes, th...

cve-2019-17558-apache-solr-rce

Apache Solr RCE CVE-2019-17558 - CTF Write-up Practical exploitation of a Velocity Template Injection vulnerability in Apache Solr, progressing from a failure in an automated tool Metasploit to a successful manual exploitation. This write-up documents the complete reasoning of the exercise,...

CVE-2022-34302

🕷️ CVE-2022-34302 - Уязвимость загрузчика New Horizon Datasys New Horizon Datasys Reboot Restore Boot Loader - Bring Your Own Vulnerable UEFI Application BYOVUA - обход Secure Boot через подписанный загрузчик со встроенным пользовательским загрузчиком PE/COFF, который загружает неподписанные...

ReflectivePluginLoader

ReflectivePluginLoader Минимальный рефлективный PE-маппер с интерфейсом горячей замены плагинов для Windows x64. Отображает DLL прямо из байтового буфера в памяти, разрешает её экспорты и вызывает их через чистый ABI IPlugin, не затрагивая LoadLibrary. Сопутствующий код к посту в блоге о...

elfloader

Résumé elfloader est un chargeur extrêmement simple pour les fichiers ELF qui génère une représentation plate en mémoire de l'ELF. Associez-le à Rust et vous pouvez désormais écrire votre shellcode dans un langage propre, sûr et de haut niveau. N'importe quelle cible que LLVM peut cibler peut êtr...

CVE-2026-95512

A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of...

CVE-2026-95512 Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader

A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of...

CVE-2026-95512

A flaw exists in the FreeType library, specifically within its CID font loader . A remote attacker could exploit this by tricking a user into opening content containing a specially crafted CID-keyed font . This font can trigger repeated allocations and decryptions of subroutine data across multip...

EUVD-2026-91327

A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of...

CVE-2026-95512

A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of...

CVE-2026-95512

A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of...

PatchlessCLRLoader

PatchlessCLRLoader PatchlessCLRLoader is a fork of InlineExecute-Assembly to load .NET assembly and direct the output to mailslot. I rewrites it to a standalone loader with the following implementation: AES encryption payload Fileless payload support Patchless AMSI and ETW bypass using hardware...

AtlasLdr

Atlas is a reflective x64 loader that has the following features: Features Retrieve of DLL and PE from a remote server Manual Mapping on a remote process Erase of the DOS Header and NTHeader Magic bytes Position independent code Use of indirect Syscalls ZwOpenProcess ZwAllocateVirtualMemory...

LdrLockLiberator

LdrLockLiberator For when DLLMain is the only way LdrLockLiberator is a collection of techniques for escaping or otherwise forgoing Loader Lock while executing your code from DllMain or anywhere else the lock may be present. It was released in conjunction with the "Perfect DLL Hijacking" article...

Kernel_VADInjector

Driver DLL Injector Driver DLL Injector Description Driver DLL Injector is a powerful tool that allows users to load drivers of their choice using their preferred mapper. By leveraging the capabilities of an unsigned driver loader, such as KDmapper, this injector was built and tested on Windows 1...

solr_rce

Apache Solr RCE via Velocity template python usage: python solrrce.py http://x.x.x.x:8983 command getshell encode payload http://www.jackson-t.ca/runtime-exec-payloads.html whoami bash -c echo,d2hvYW1p|base64,-d|bash,-i 0x01 Introduction to Solr Solr is an open-source enterprise search platform...

SpookFlare

SpookFlare SpookFlare has a different perspective to bypass security measures and it gives you the opportunity to bypass the endpoint countermeasures at the client-side detection and network-side detection. SpookFlare is a loader/dropper generator for Meterpreter, Empire, Koadic etc. SpookFlare h...