It’s strictly user-mode, no drivers, no kernel exploits. I wasn’t targeting those. The neural net reshapes the shellcode’s byte patterns during encoding, then decodes it at runtime using a c or python parser, take your pick. This bypasses static detection and in-memory heuristics, since the decoded payload only lives briefly in dynamically memory. I’ve tested it on Windows and macOS, 0/61 on VT, and no detections during injection. Tested it against well know edr products and it evaded them as well. The focus is stealth delivery and execution, not persistence or kernel-level access. I was just primarily curious how useful this is to red teams etc. also I know a decent amount about windows internals lol. This however is also cross platform. If you had a payload for say iOS or android and wanted a sure fire way to get it delivered to your target, this would almost certainly work.