Malforge Public Organization
Popular repositories Loading
-
EarlyBird-APC-Code-Injection
EarlyBird-APC-Code-Injection PublicEarlyBird APC Injection is a stealthy process injection technique that queues malicious shellcode into a suspended thread of a newly created process. Once the thread is resumed, the payload execute…
C 10
-
Crafting-Trojan-Guide
Crafting-Trojan-Guide PublicThis repository demonstrates how a Trojan can be crafted by backdooring an executable using code caves and shellcode injection. It is intended purely for educational purposes in cybersecurity and e…
-
Executing-ShellCode-Introduction
Executing-ShellCode-Introduction PublicA guide on how to executing Malicious Shell-Code with C++
C++ 2
-
Process-Hollowing
Process-Hollowing PublicProcess Hollowing is a stealthy injection method that runs malicious code inside a legitimate process.
C++ 2
-
Antivirus-Evasion-with-AES-Encryption
Antivirus-Evasion-with-AES-Encryption PublicA proof-of-concept demonstrating static antivirus evasion using AES-encrypted shellcode in C. Includes encryption script in Python and a runtime decryption/execution mechanism in Windows.
C 1
-
Hijacking-Remote-Thread
Hijacking-Remote-Thread PublicTechnique to inject and execute code in a remote process by hijacking an existing thread.
C 1
Repositories
- Android-Ghost-Dropper-A Public
Free Module 3: Advanced Android malware dropper demonstrating extreme persistence. Showcases silent APK payload installation via the PackageInstaller API, icon hiding, and background survival even after the host app is completely uninstalled
- Android-Fake-Update-Phisher-B Public
Free Module 1: An educational Android security lab demonstrating how modern banking trojans steal credentials using fake system update notifications and full-screen phishing overlays. Includes a Kotlin Android app and a Python Flask C2 dashboard for real-time exfiltration. For research and defense analysis only.
- Android-Pocket-RAT-I Public
Free Module 2: An educational Android Command and Control (C2) lab. Demonstrates how lightweight Remote Access Trojans (RATs) maintain bidirectional communication via HTTP polling to execute remote commands. Includes a Kotlin client and Python/Flask dashboard. For defense analysis only.
- Process-Code-Injection-Techniques-Cheatsheet Public
A concise cheatsheet covering key process code injection techniques for red teaming and malware development.
- Code-Execution-via-Callbacks-CheatSheet Public
This repository contains a practical cheat sheet demonstrating various callback-based techniques to execute shellcode on Windows, with detection insights and code samples.
- Executing-Code-via-EnumDesktopsW-Callback Public
This repository demonstrates how to execute shellcode on a Windows machine using the `EnumDesktopsW` callback mechanism. It leverages memory allocation, shellcode injection, and callback execution for proof-of-concept.
- Multi-Platform-Malware Public
Cross-architecture malware designed to run seamlessly on both 32-bit and 64-bit Windows systems, featuring dynamic shellcode execution and reverse shell capabilities.
- Process-Hollowing Public
Process Hollowing is a stealthy injection method that runs malicious code inside a legitimate process.
- asynchronous-code-injection Public
A deep dive into asynchronous code injection using APC techniques. Includes code samples, step-by-step explanations, and real-world POCs.
- Bypass-Windows-Defender-Static-Detection Public
This repository demonstrates basic static detection evasion techniques for Windows Defender. It includes code to inject an XOR-encrypted reverse shell payload into a remote process using common Windows API calls. The payload is stored in the .rsrc section and decrypted at runtime.
People
This organization has no public members. You must be a member to see who’s a part of this organization.
Top languages
Loading…
Most used topics
Loading…