Pinned

1. Pyramid Pyramid Public

   a tool to help operate in EDRs' blind spots

   Python 615 72

2. PythonMemoryModule PythonMemoryModule Public

   pure-python implementation of MemoryModule technique to load dll and unmanaged exe entirely from memory

   Python 276 39

3. ModuleShifting ModuleShifting Public

   Stealthier variation of Module Stomping and Module Overloading injection techniques that reduces memory IoCs. Implemented in Python ctypes

   Python 103 12

4. ProcessStomping ProcessStomping Public

   A variation of ProcessOverwriting to execute shellcode on an executable's section

   PowerShell 140 24

5. Embedder Embedder Public

   Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies

   C++ 105 13