Fileless attack with persistence

🚫💾 Run binaries straight from memory in Linux

k0otkit is a universal post-penetration technique which could be used in penetrations against Kubernetes clusters.

execute PE in memory Filelessly

Made a sample fileless malware which could cause potential harm if used correctly.

Fileless Shellcode Loader with Python

A fileless process injector written in PowerShell for injecting shellcode and migrating your existing shell to new processes

This case study analyzed a fileless privilege escalation attack where the adversary exploited an undocumented administrative override parameter (admin_override=true) to bypass standard authentication and gain elevated access without triggering any alert or logging trail through normal access controls.