M01N-Team/HeaderLessPE

P³-Shellcode Loader is a loader that implements a code injection technique which leverages the Process Parameters structure as an execution and staging location for shellcode injection into remote processes, without triggering common detection mechanisms.

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

Reflective x64 PE/DLL Loader implemented using Dynamic Indirect Syscalls

RunPE implementation with multiple evasive techniques (1)

Dynamic shellcode loader with sophisticated evasion capabilities

A small x64 library to load dll's into memory.

Windows tool for dumping malware PE files from memory back to disk for analysis.

Six-layer call-stack spoofing via .pdata lacunae — defeats ETW-Ti, kernel callbacks, CET shadow stack, and return-address validation in a single composite chain.