Build software better, together

research-virus / stuxnet

Star

Public open-source code of malware Stuxnet (aka MyRTUs).

virus malware root dropper zero-day stuxnet myrtus

Updated Aug 27, 2022
C

hlldz / SpookFlare

Star

Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.

obfuscation loader bypass dropper antivirus-evasion av-evasion av-bypass antivirus-testing endpoint-bypass

Updated May 8, 2019
Python

pard0p / CallstackSpoofingPOC

Star

C++ self-Injecting dropper based on various EDR evasion techniques.

dropper av-evasion edr-evasion indirect-syscall

Updated Feb 11, 2024
C

UndeadSec / Enigma

Star

Multiplatform payload dropper

python security enigma pentest payload dropper

Updated Aug 17, 2021
Python

4w4k3 / Umbrella

Star

A Phishing Dropper designed to Pentest.

windows linux phishing pentest dropper

Updated May 15, 2017
Python

ariary / fileless-xec

Star

Stealth dropper executing remote binaries without dropping them on disk .(HTTP3 support, ICMP support, invisible tracks, cross-platform,...)

golang security quic pentest stealth dropper http3 memfd pentest-tool bypass-firewall fileless

Updated Jul 2, 2024
Go

ProcessusT / Venoma

Star

Yet another C++ Cobalt Strike beacon dropper with Compile-Time API hashing and custom indirect syscalls execution

red cobalt malware antivirus syscalls team pentest bypass payload dropper strike c2 edr indirect

Updated May 29, 2025
C++

A Dropper POC with a focus on aiding in EDR evasion, NTDLL Unhooking followed by loading ntdll in-memory, which is present as shellcode (using pe2shc by @hasherezade). Payload encryption via SystemFucntion033 NtApi and No new thread via Fiber

malware antivirus evasion bypass fiber dropper bypass-antivirus edr implant process-injection ntdll-unhooking systemfunction033

Updated Feb 10, 2023
C

NYAN-x-CAT / Dropless-Malware

Star

Download a payload and make it run from registry without droppng.

downloader backdoor persistence malware drop dropper

Updated Apr 9, 2019
C#

NYAN-x-CAT / Csharp-Loader

Star

Download a .NET payload and run it on memory

backdoor malware loader stub payload dropper

Updated Apr 12, 2019
C#

0x00pf / programming4wannabes

Star

Programming course for Wannabes

c linux arm mips assembly x86-64 malware rat syscalls dropper malware-development

Updated Jan 26, 2025
C

redcode-labs / Solaris

Star

A local LKM rootkit loader/dropper that lists available security mechanisms

golang rootkit loader dropper lkm

Updated Sep 4, 2021
Go

TestingPens / CPLDropper

Star

A Control Panel Applet dropper project. It has a high success rate on engagements since nobody cares about .CPL files and you can just double click them.

cpp malware dropper blueteam cpl redteam

Updated May 31, 2018
C++

leoloobeek / GoGreen

Star

Environmental (and http) keying for scripting languages

golang encryption powershell vbscript dropper jscript environmental-keying

Updated Oct 5, 2018
Go

FreeLesio / Rubber-Ducky-Reverse-Shell

Star

Fast & Silent Script For Rubber Ducky To Inject Reverse Shell

keyboard rubber-ducky malware payload dropper keystroke-injection bypass-antivirus usb-hid badusb fud hotplug av-evasion uac-bypass ducky-payloads disable-windows-defender

Updated Oct 8, 2021

slezercc / antivirus-bypass

Star

Fully undetectable bypass for every antivirus (FUD at the moment). Works by downloading a bat file that adds an exclusion for exe files, and then downloads your file and runs it.