A library for loading ELF from memory and/or making Linux syscalls on Android written in pure Java.

Research proof-of-concept repository for ELF executable embedding, in-memory execution, and obfuscation techniques

Package gimel provides functionality for in-memory execution on Linux.

Advanced memory evasion PoC that cyclically encrypts shellcode and fluctuates between RW/NoAccess and RX memory protections to bypass memory scanners like Moneta and PE-Sieve.

Encryption tool for Windows to load encrypted shell code. Tool for developing malicious software and in-memory execution.

Advanced Windows shellcode development framework with position-independent code generation, dynamic API resolution, and cross-architecture support for security research and penetration testing.

An advanced Windows shell code loader and generator toolset featuring XOR encryption, debug protection, and GUI capabilities for penetration testing.

This package implements a basic PE loader in python to load executable in memory (used to create packer, loader from internet or to impact a process context).