phra/PEzor

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

2129 stars · 326 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

PEzor is an open-source shellcode and PE packer that wraps executables or raw shellcode into new binaries with evasion features like unhooking, anti-debug checks, raw syscalls, and sgn encoding. It is aimed at red team operators and offensive security research on Windows targets.

Use cases

• pack an executable to evade antivirus detection
• encrypt and obfuscate shellcode into a Windows PE
• bypass userland API hooks with unhooking
• add anti-debug checks to a payload
• generate shellcode loaders with raw syscalls
• prepare red team payloads for penetration tests

When to choose

• you are a red teamer or pentester needing AV-evasive Windows payloads
• you want to pack shellcode or executables with anti-analysis features
• you need a free, scriptable alternative to commercial packers

When to avoid

• you need to protect legitimate software rather than test defenses
• your target platform is not Windows
• you cannot legally use offensive security tooling in your jurisdiction

Facets

cli-tool · maturity active

security cryptography developer-tools security penetration-testing windows cli shellcode pe-packer antivirus-evasion red-team offensive-security donut syscalls linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="phra/PEzor")