aahmad097/AlternativeShellcodeExec

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1736 stars · 336 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A collection of C++ examples demonstrating alternative Windows callback functions for executing position-independent shellcode, avoiding detection techniques that rely on CreateThread. It catalogs numerous callback-based shellcode execution techniques for offensive security research.

Use cases

• execute shellcode without calling CreateThread
• evade EDR detection of thread creation APIs
• learn callback-based code execution techniques on Windows
• build red team tooling with alternative execution methods
• study position-independent shellcode loaders
• research Windows API abuse for code execution

When to choose

• you need shellcode execution techniques that avoid common API hooks
• you are researching offensive security or red team tradecraft on Windows
• you want a reference catalog of callback-based execution methods

When to avoid

• you need a production-ready or maintained security product
• you are not working on Windows or with native C++
• you need defensive-only tooling rather than offensive techniques

Facets

library · maturity maintenance

security developer-tools security penetration-testing windows cpp shellcode red-team callbacks offensive-security malware-development code-execution position-independent-code

Member repositories

For agents

markdown · JSON · MCP: product_card(name="aahmad097/AlternativeShellcodeExec")