• Earn real money by being active: Hello Guest, earn real money by simply being active on the forum — post quality content, get reactions, and help the community. Once you reach the minimum credit amount, you’ll be able to withdraw your balance directly. Learn how it works.

shellcode

  1. dEEpEst

    Hacking Cobalt Strike Shellcode Generator

    CSSG Cobalt Strike Shellcode Generator Ryan Stephenson (RCStep) Adds Shellcode - Shellcode Generator to the Cobalt Strike top menu bar CSSG is aggressor, .NET, and python scripts used to more easily generate and format beacon shellcode Generates beacon stageless shellcode with exposed exit...
  2. itsMe

    Phyton Niernen is a Shellcode Obfuscator

    A shellcode obfuscator written in Python for fun and research. Niernen performs operations like Exclusive-OR, Addition, Substraction, Right Shift and Left Shift and displays output in Hexadecimal format. Hidden content
  3. itsMe

    Sharem: ultimate Windows shellcode tool

    SHAREM is intended to be the ultimate Windows shellcode tool, with support to emulate over 12,000 WinAPIs, virtually all user-mode Windows syscalls, and SHAREM provides numerous new features. SHAREM was released on September 29, 2022, at Virus Bulletin, the top malware conference globally...
  4. itsMe

    LaZzzy: shellcode loader

    laZzzy is a shellcode loader that demonstrates different execution techniques commonly employed by malware. laZzzy was developed using different open-source header-only libraries. Features     Direct syscalls and native (Nt*) functions (not all functions but most)     Import Address Table...
  5. itsMe

    Monomorph: MD5-Monomorphic Shellcode Packer

    MD5-Monomorphic Shellcode Packer – all payloads have the same MD5 hash What does it do? It packs up to 4KB of compressed shellcode into an executable binary, near-instantly. The output file will always have the same MD5 hash: 3cebbe60d91ce760409bbe513593e401 Currently, only Linux x86-64 is...
  6. itsMe

    Shelltropy: hiding malicious shellcode via Shannon encoding

    The more predictable you are, the less you get detected A technique of hiding malicious shellcode based on low-entropy via Shannon encoding. Entropy is the measure of the randomness in a set of data (here: shellcode). The higher the entropy, the more random the data is. Shannon Entropy is an...
  7. itsMe

    pe_to_shellcode v1.1 - Converts PE into a shellcode

    Converts PE so that it can be then injected just like a normal shellcode. (At the same time, the output file remains to be a valid PE). Supports both 32 and 64-bit PEs Objective: The goal of this project is to provide a possibility to generate PE files that can be injected with minimal...
  8. itsMe

    Pe_to_shellcode v1.0 - Converts PE into a shellcode

    Converts PE so that it can be then injected just like a normal shellcode. (At the same time, the output file remains to be a valid PE). Supports both 32 and 64-bit PEs Objective: The goal of this project is to provide a possibility to generate PE files that can be injected with minimal effort...
  9. itsMe

    NimPackt-v1: Nim-based packer for .NET executables and raw shellcode

    NimPackt is a Nim-based packer for .NET (C#) executables and shellcode targeting Windows. It automatically wraps the payload in a Nim binary that is compiled to Native C and as such harder to detect and reverse engineer. There are two main execution methods:     Execute-Assembly re-packs a .NET...
  10. itsMe

    Shellcode Template: easily modifiable shellcode template for Windows x64/x86

    Shellcode Template An easily modifiable shellcode template for Windows x64/x86 How does it work? This template is heavily based on Austin Hudson’s (aka SecIdiot) TitanLdr It compiles the project into a PE Executable and extracts the .text section. Example The entrypoint of the shellcode...
  11. itsMe

    PELoader: implement various shellcode injection techniques

    PELoader implement various shellcode injection techniques, and use libpeconv library to load encrypted PE files instead of injecting shellcode into remote thread. Following techniques were implemented:     Module Stomping (LoadLibrary)     Module Stomping (NtMapViewOfSection)     Transacted...
  12. itsMe

    Bluffy - Convert Shellcode Into Different Formats!

    Bluffy is a utility which was used in experiments to bypass Anti-Virus products (statically) by formatting shellcode into realistic looking data formats. Proof-of-concept tools, such as 0xBoku's Ninja_UUID_Runner and ChoiSG's UuidShellcodeExec, inspired the initial concept for Bluffy. So far...
  13. itsMe

    Bluffy: bypass Anti-Virus products by formatting shellcode into realistic looking data formats

    Bluffy is a utility which was used in experiments to bypass Anti-Virus products (statically) by formatting shellcode into realistic-looking data formats. So far, we implemented:     UUID     CLSID     SVG     CSS     CSV Hidden content
  14. itsMe

    Shellcode Encryptor: shell code encryptor/decryptor/executor to bypass anti virus

    A simple shellcode encryptor/decryptor/executor to bypass anti-virus. Hidden content
  15. itsMe

    Jektor Toolkit: Windows user-mode shellcode execution tool

    Jektor Toolkit v1.0 This utility focuses on shellcode injection techniques to demonstrate methods that malware may use to execute shellcode on a victim system      Dynamically resolves API functions to evade IAT inclusion      Includes usage of undocumented NT Windows API functions     ...
  16. itsMe

    PEzor - Open-Source Shellcode And PE Packer

    Open-Source Shellcode & PE Packer Hidden content
  17. itsMe

    Beaconator: generate staged or stageless shellcode and packing the generated shellcode

    Beaconator is an aggressor script for Cobalt Strike used to generate either staged or stageless shellcode and packing the generated shellcode using your tool of choice Currently, it supports the following tools: Staged Beacon Generator     Alaris: Alaris is a new and sneaky shellcode loader...
  18. itsMe

    Go-shellcode: Windows Shellcode runners and supporting utilities

    go-shellcode is a repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques. Hidden content
  19. itsMe

    Sharperner - Simple executable generator with encrypted shellcode

    Sharperner is a tool written in CSharp that generate .NET dropper with AES and XOR obfuscated shellcode. Generated executable can possibly bypass signature check but I cant be sure it can bypass heuristic scanning. Features PE binary     Process Hollowing     PPID Spoofing     Random...
  20. itsMe

    Sharperner: generate .NET dropper with AES and XOR obfuscated shellcode

    Sharperner Sharperner is a tool written in CSharp that generates a .NET dropper with AES and XOR obfuscated shellcode. A generated executable can possibly bypass signature check but I can’t be sure it can bypass heuristic scanning. Features PE binary     Process Hollowing     PPID Spoofing...
Back
Top