klezVirus/inceptor

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1817 stars · 280 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Inceptor is a template-driven PE packer and AV/EDR evasion framework for Windows, aimed at penetration testers and red teamers. It automates converting EXE/DLL payloads into shellcode (via Donut, sRDI, pe2sh), encoding/encrypting it, and generating loaders that bypass common AV and EDR defenses.

Use cases

• generate shellcode loaders that bypass AV and EDR
• convert EXE or DLL payloads into position-independent shellcode
• automate AMSI bypass for red team operations
• pack a payload with encryption and obfuscation for pentests
• create custom process injection loaders for Windows
• test endpoint defenses against common evasion techniques

When to choose

• you are a red teamer or pentester needing automated AV/EDR evasion on Windows
• you want to convert existing binaries into shellcode and wrap them in a custom loader
• you need a customizable, template-based payload generator for authorized engagements

When to avoid

• you need a defensive or detection tool rather than an offensive one
• you require a maintained product with guaranteed updates - active development has moved to a paid sponsor model
• your target platform is not Windows
• you lack authorization to perform offensive security testing

Facets

cli-tool · maturity maintenance

security penetration-testing cryptography developer-tools security penetration-testing windows windows cli av-evasion edr-bypass amsi-bypass pe-packer shellcode red-team process-injection dinvoke pinvoke payload-generator

Member repositories

For agents

markdown · JSON · MCP: product_card(name="klezVirus/inceptor")