Pinned Loading

1. JITLoader JITLoader Public

   Using the .NET JIT compiler's RWX memory to decrypt and execute shellcode without using APIs or syscalls.

   C#

2. Powershell-Smuggler Powershell-Smuggler Public

   Decrypting a powershell script and executing it using scriptblock smuggling, bypassing AMSI and some telemetry.

   PowerShell 1

3. Shellcode-Toolkit Shellcode-Toolkit Public

   A simple, easy to use toolkit for generating highly optimized shellcode and tiny executables using Windows GCC.

   C

4. SuspendedSyscalls SuspendedSyscalls Public

   Extracting syscall numbers from a suspended process before it can be hooked or obfuscated by an EDR

   C