A library for loading ELF from memory and/or making Linux syscalls on Android written in pure Java.
Advanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advanced evasion techniques against modern EDR systems. It shifts away from traditional signature-based obfuscation towards behavioral camouflage.
Modular post-exploitation framework for authorised red-team work. Interactive reverse/bind shells over TCP/TLS/mTLS, plus a pull-based Go beacon with ECDSA-signed tasks and compile-time OPSEC profiles. One operator console, shared TLS, per-session logs.
A high-performance stealth Reflective PE-Loader for Windows binaries. Protections, Encrypts, Compresses, and executes EXE and DLL payloads directly from RAM with zero disk footprint.
Advanced Windows shellcode development framework with position-independent code generation, dynamic API resolution, and cross-architecture support for security research and penetration testing.
OSX dynamic linker written in Rust
A high-performance stealth Reflective EFI-Loader for UEFI binaries. Protections, Encrypts, Compresses, and executes EFI payloads directly from RAM with zero disk footprint.
In-memory loading and executing Mach-O executable.
Advanced memory evasion PoC that cyclically encrypts shellcode and fluctuates between RW/NoAccess and RX memory protections to bypass memory scanners like Moneta and PE-Sieve.
A high-performance stealth Reflective ELF-Launcher for Linux binaries. Protections, Encrypts, Compresses, and executes ELF payloads directly from RAM with zero disk footprint.
Package gimel provides functionality for in-memory execution on Linux.
Research proof-of-concept repository for ELF executable embedding, in-memory execution, and obfuscation techniques
Linux In-Memory ELF Loader -- Execute binaries from memory via memfd_create, /proc/self/mem, shm_open. Zero disk artifacts. Bash + Python.
🚀 Load and execute Mach-O executables in memory with this reflective loader, providing a unique alternative to execve for macOS command-line programs.
Small Rust toolkit for pulling shellcode out of a Windows PE and (optionally) executing it in-memory for quick validation.
Rust/Rocket HTTP server that merges two NetCDF-4 files fully in memory and returns the combined file. No disk I/O required!
This package implements a basic PE loader in python to load executable in memory (used to create packer, loader from internet or to impact a process context).
Run private AI chat models on your iPhone using Apple MLX.
To associate your repository with the in-memory-execution topic, visit your repo's landing page and select "manage topics."