Mr-Un1k0d3r/DKMC

Health v2 · maintenance only

Flags: no_releases archived no_license

Adoption not part of the score

1418 stars · 288 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

DKMC (Don't Kill My Cat) is a Python CLI tool that embeds obfuscated shellcode inside valid BMP images, producing polyglot files that are both legitimate images and executable shellcode. It generates PowerShell delivery payloads and can serve the malicious images via a built-in web server to evade sandbox analysis.

Use cases

• hide shellcode inside a valid BMP image
• evade sandbox analysis of malicious payloads
• generate PowerShell download-and-execute payloads
• deliver shellcode payloads over a web server
• red team payload obfuscation

When to choose

• you need to embed shellcode in a polyglot image for red team engagements
• you want a simple interactive CLI for payload obfuscation and PowerShell delivery

When to avoid

• you need modern evasion against current Windows protections, since the tool is unmaintained and Windows 10 RWX restrictions limit it
• you need a maintained tool with active support or a clear license

Facets

cli-tool · maturity maintenance

security penetration-testing cli security penetration-testing python cli windows shellcode evasion polyglot red-team payload-delivery powershell linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Mr-Un1k0d3r/DKMC")