D7EAD/mkPIVM

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

Advanced OPSEC fork of Donut. Features a Custom in-memory CLR Host, Tail-Jump ETW bypasses, and zero-patch AMSI evasion for stealthy shellcode generation.

Polymorphic AV/AMSI bypass toolkit - Donut shellcode runner for offensive .NET/PE tools

can convert EXE/DLL into position-independent shellcode

shellcode transformation tool for YARA evasion

Template-based shellcode packer written in Rust. Made with <3 for pentesters.

A modern 32/64-bit position independent implant template

A shellcode loader generator with support for multiple injection techniques, built for red team engagements.

Python AV Evasion Tools