0xsp-SRD/mortar

Health v2 · maintenance only

Adoption not part of the score

1508 stars · 238 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Mortar Loader is a red team evasion tool that encrypts PE binaries and shellcode and executes them in memory using various injection techniques to bypass AV/EDR/XDR products. It includes an encryptor utility and a loader library written in Free Pascal, supporting fileless execution, APC injection, and process masquerading.

Use cases

• bypass antivirus detection for red team payloads
• encrypt and load shellcode in memory
• evade EDR with process injection
• execute fileless payloads from remote staged binaries
• test security product detection capabilities
• inject encrypted PE into remote process via DLL

When to choose

• you need an offensive security loader for authorized red team engagements
• you want to test AV/EDR detection against memory-based payload execution
• you need shellcode or PE encryption with multiple injection techniques

When to avoid

• you need a defensive security tool or malware scanner
• you require a supported, production-grade deployment tool
• your use case is not authorized offensive security testing

Facets

cli-tool · maturity active

security cryptography cli security penetration-testing windows cross-platform cli red-team evasion loader shellcode av-bypass edr-bypass process-injection fileless-execution pascal

Member repositories

For agents

markdown · JSON · MCP: product_card(name="0xsp-SRD/mortar")