No description
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
2026-09-20 14:10:08 +02:00
Advanced-Keylogging add: Advanced-Keylogging/keylogger.c 2026-08-29 15:38:10 +02:00
Anti-Analysis Techniques update: structs.h 2026-08-29 15:40:54 +02:00
Anti-Virtual-APIHammering add: Anti-Virtual-APIHammering/api-hammering.c 2026-08-29 15:38:10 +02:00
Anti-Virtual-Techniques add: Anti-Virtual-Techniques/Techniques.c 2026-08-29 15:38:11 +02:00
AntiDebugging add: AntiDebugging/Techniques.c 2026-08-29 15:38:12 +02:00
AntiDebugging-SelfDeletion add: AntiDebugging-SelfDeletion/structs.h 2026-08-29 15:38:13 +02:00
ApcInjection add: main.c 2026-08-29 15:40:58 +02:00
Basic-Dynamic-API-Resolution add: Basic-Dynamic-API-Resolution/dynamic-res.c 2026-09-06 13:11:25 +02:00
Basic-Keylogger add: Basic-Keylogger/keylogger.c 2026-08-29 15:38:13 +02:00
Domain-KillSwitch add: Domain-KillSwitch/domain-killswitch.c 2026-08-29 15:38:15 +02:00
DRM-Equipped-Malware add: DRM-Equipped-Malware/structs.h 2026-08-29 15:38:14 +02:00
Early-Bird-HashedAPIs add: Early-Bird-HashedAPIs/resolve-hashes.h 2026-09-06 16:18:49 +02:00
EarlyBird-DirectSyscall add: EarlyBird-DirectSyscall/syscalls.h 2026-09-13 11:57:11 +02:00
EarlyBird-IndirectSyscall add: EarlyBird-IndirectSyscall/indirectsyscalls.h 2026-09-20 14:09:59 +02:00
Ghost-Process-Injection add: Ghost-Process-Injection/Structs.h 2026-08-29 15:38:16 +02:00
Ghost-Process-Ldr add: Ghost-Process-Ldr/syscall-n0xshell.h 2026-09-06 12:50:42 +02:00
Hardware-Breakpoints-For-Hooking add: Hardware-Breakpoints-For-Hooking/main.c 2026-08-29 15:38:18 +02:00
Harpadering Process Injection add: Harpadering Process Injection/Structs.h 2026-08-29 15:38:19 +02:00
IAT Hiding - Custom GetProcAddress add: IAT Hiding - Custom GetProcAddress/Custom-GetProcAddress.c 2026-08-29 15:38:19 +02:00
IAT-Camoflage add: IAT-Camoflage/iat-camoflage.c 2026-08-29 15:38:20 +02:00
Local Mapping Injection add: Local Mapping Injection/LocalMappingInjection.c 2026-08-29 15:38:20 +02:00
Local-PE-Injection add: Local-PE-Injection/LocalPE-Injection.c 2026-08-29 15:38:21 +02:00
MalDevEdr add: MinHook.h 2026-08-29 15:41:11 +02:00
MetaData-Modification add: MetaData-Modification/resource.h 2026-08-29 15:38:22 +02:00
Module-Stomping add: Module-Stomping/Structs.h 2026-08-29 15:38:23 +02:00
N0xshell-Encryptor add: N0xshell-Encryptor/encryptor.c 2026-08-29 15:38:23 +02:00
N0xshell-Ldr add: N0xshell-Ldr/Structs.h 2026-08-29 15:38:25 +02:00
NTDLL-Unhooking-SuspendedProcess add: NTDLL-Unhooking-SuspendedProcess/NTDLL-Unhooking-Suspended-Process.c 2026-08-29 15:38:25 +02:00
PE-Fluctuation add: PE-Fluctuation/pe-fluctuation.c 2026-08-29 15:38:26 +02:00
Peristence-Windows-Registry update: main.c 2026-08-29 15:41:19 +02:00
Process Injection - Shellcode Injection add: Process Injection - Shellcode Injection/ProcInject.c 2026-08-29 15:38:26 +02:00
Process-Hollowing add: Process-Hollowing/process-hollowing.c 2026-08-29 15:38:27 +02:00
ProcessArgumentSpoofing add: iat-camoflage.c 2026-08-29 15:41:22 +02:00
Remote-Thread-Injection-Callback-Trampoline add: Remote-Thread-Injection-Callback-Trampoline/RemoteProcessInjection-WithCallback.c 2026-08-29 15:38:28 +02:00
Shellcode-Placement-ResourceSection add: Shellcode-Placement-ResourceSection/resource.h 2026-08-30 11:57:39 +02:00
Shellcode-Placement-ResourceSection-Manual add: Shellcode-Placement-ResourceSection-Manual/resource.h 2026-08-30 13:54:47 +02:00
Shellcode-Placement-TextSection add: Shellcode-Placement-TextSection/shellcode-placement.c 2026-08-29 17:20:53 +02:00
StaticAPI-Hashing add: StaticAPI-Hashing/apihashing.c 2026-08-29 15:38:28 +02:00
Syscalls-ProcessInjection add: Syscalls-ProcessInjection/Syscalls-processinjection.c 2026-08-29 15:38:29 +02:00
Syscalls-Syswhisphers add: Syscalls-Syswhisphers/syscall-syswhisphers.c 2026-08-29 15:38:30 +02:00
Threadless-Injection add: Threadless-Injection/threadless-injection.c 2026-08-29 15:38:31 +02:00
Unhooking NTDLL - Knowndlls add: Unhooking NTDLL - Knowndlls/ntdll-knowndlls.c 2026-08-29 15:38:31 +02:00
README.md Update README.md 2026-08-29 15:51:06 +02:00

Malware-Development

Source code for all malware development techniques documented on n0xshell.dev.

Each folder corresponds to a blog post — the writeup explains the concept and how the code works, the code here is the implementation.