r3xmax/PhantomCtx

Automated proxy DLL generator for DLL hijacking

Automated DLL Hijacking Discovery, Validation, and Confirmation. Turning local misconfigurations into weaponized, confirmed attack paths.

An AdaptixC2 Loader with Advanced Evasion, Such as Phantom DLL Hollowing | Stack Spoof | Sleep Mask | CFG Bypass | CET Bypass

Proof of Concept for Process Code Injection Without Using WriteProcessMemory

Authenticode signature manipulation toolkit for Red Team operations and security research. Covers signature stealing, metadata cloning, SIP hijacking across 19 file types, WinVerifyTrust FinalPolicy bypass, PKCS#7 payload embedding, SIP execution surface implants, Smart App Control Bypass, and analyst-triggered persistence via OID handlers.

Generate DLL proxy/sideload projects. Automatically parses PE export tables and generates ready-to-compile project for red team engagements.

AV/EDR evasion via direct and indirect system calls Windows NT 3.1 through Windows 11 24H2 · x64 · x86 · WoW64 · ARM64

This is for Ethical Use only. The default automated binaries created are all burned. I have added the script to the repo to modify certain signatures and it will still work.

Polymorphic AV/AMSI bypass toolkit - Donut shellcode runner for offensive .NET/PE tools