Malforge Public Organization
Popular repositories Loading
-
EarlyBird-APC-Code-Injection
EarlyBird-APC-Code-Injection PublicEarlyBird APC Injection is a stealthy process injection technique that queues malicious shellcode into a suspended thread of a newly created process. Once the thread is resumed, the payload execute…
C 10
-
Crafting-Trojan-Guide
Crafting-Trojan-Guide PublicThis repository demonstrates how a Trojan can be crafted by backdooring an executable using code caves and shellcode injection. It is intended purely for educational purposes in cybersecurity and e…
-
Executing-ShellCode-Introduction
Executing-ShellCode-Introduction PublicA guide on how to executing Malicious Shell-Code with C++
C++ 2
-
Hijacking-Remote-Thread
Hijacking-Remote-Thread PublicTechnique to inject and execute code in a remote process by hijacking an existing thread.
C 1
-
Thread-IDs-Process-IDs-The-Start-of-Malware-Magic
Thread-IDs-Process-IDs-The-Start-of-Malware-Magic PublicThreadIDs and ProcessIDs: The foundation of malware techniques, covering the basics of PIDs, TIDs, and their role in code injection and malware devlopment,.
C++ 1
-
Shellcode-Injection-Using-Window-Callbacks
Shellcode-Injection-Using-Window-Callbacks PublicA minimal Windows GUI demo that allocates memory and executes 64-bit shellcode to display a MessageBox. Demonstrates basic shellcode injection using `VirtualAlloc`, `memcpy`, and function pointers …
C++ 1
Repositories
- Android-Ghost-Dropper-A Public
Free Module 3: Advanced Android malware dropper demonstrating extreme persistence. Showcases silent APK payload installation via the PackageInstaller API, icon hiding, and background survival even after the host app is completely uninstalled
Malforge-Public-Organization/Android-Ghost-Dropper-A’s past year of commit activity - Android-Fake-Update-Phisher-B Public
Free Module 1: An educational Android security lab demonstrating how modern banking trojans steal credentials using fake system update notifications and full-screen phishing overlays. Includes a Kotlin Android app and a Python Flask C2 dashboard for real-time exfiltration. For research and defense analysis only.
Malforge-Public-Organization/Android-Fake-Update-Phisher-B’s past year of commit activity - Android-Pocket-RAT-I Public
Free Module 2: An educational Android Command and Control (C2) lab. Demonstrates how lightweight Remote Access Trojans (RATs) maintain bidirectional communication via HTTP polling to execute remote commands. Includes a Kotlin client and Python/Flask dashboard. For defense analysis only.
Malforge-Public-Organization/Android-Pocket-RAT-I’s past year of commit activity - Process-Code-Injection-Techniques-Cheatsheet Public
A concise cheatsheet covering key process code injection techniques for red teaming and malware development.
Malforge-Public-Organization/Process-Code-Injection-Techniques-Cheatsheet’s past year of commit activity - Code-Execution-via-Callbacks-CheatSheet Public
This repository contains a practical cheat sheet demonstrating various callback-based techniques to execute shellcode on Windows, with detection insights and code samples.
Malforge-Public-Organization/Code-Execution-via-Callbacks-CheatSheet’s past year of commit activity - Executing-Code-via-EnumDesktopsW-Callback Public
This repository demonstrates how to execute shellcode on a Windows machine using the `EnumDesktopsW` callback mechanism. It leverages memory allocation, shellcode injection, and callback execution for proof-of-concept.
Malforge-Public-Organization/Executing-Code-via-EnumDesktopsW-Callback’s past year of commit activity - Multi-Platform-Malware Public
Cross-architecture malware designed to run seamlessly on both 32-bit and 64-bit Windows systems, featuring dynamic shellcode execution and reverse shell capabilities.
Malforge-Public-Organization/Multi-Platform-Malware’s past year of commit activity - Process-Hollowing Public
Process Hollowing is a stealthy injection method that runs malicious code inside a legitimate process.
Malforge-Public-Organization/Process-Hollowing’s past year of commit activity - asynchronous-code-injection Public
A deep dive into asynchronous code injection using APC techniques. Includes code samples, step-by-step explanations, and real-world POCs.
Malforge-Public-Organization/asynchronous-code-injection’s past year of commit activity - Bypass-Windows-Defender-Static-Detection Public
This repository demonstrates basic static detection evasion techniques for Windows Defender. It includes code to inject an XOR-encrypted reverse shell payload into a remote process using common Windows API calls. The payload is stored in the .rsrc section and decrypted at runtime.
Malforge-Public-Organization/Bypass-Windows-Defender-Static-Detection’s past year of commit activity
People
This organization has no public members. You must be a member to see who’s a part of this organization.
Top languages
Loading…
Most used topics
Loading…