A library for loading ELF from memory and/or making Linux syscalls on Android written in pure Java.

Research proof-of-concept repository for ELF executable embedding, in-memory execution, and obfuscation techniques

Package gimel provides functionality for in-memory execution on Linux.

Advanced memory evasion PoC that cyclically encrypts shellcode and fluctuates between RW/NoAccess and RX memory protections to bypass memory scanners like Moneta and PE-Sieve.

Advanced Windows shellcode development framework with position-independent code generation, dynamic API resolution, and cross-architecture support for security research and penetration testing.

This package implements a basic PE loader in python to load executable in memory (used to create packer, loader from internet or to impact a process context).

Encryption tool for Windows to load encrypted shell code. Tool for developing malicious software and in-memory execution.

An advanced Windows shell code loader and generator toolset featuring XOR encryption, debug protection, and GUI capabilities for penetration testing.