Follow along with the video below to see how to install our site as a web app on your home screen.
Note: This feature may not be available in some browsers.
Earn real money by being active: Hello Guest, earn real money by simply being active on the forum — post quality content, get reactions, and help the community. Once you reach the minimum credit amount, you’ll be able to withdraw your balance directly. Learn how it works.
CSSG
Cobalt Strike Shellcode Generator
Ryan Stephenson (RCStep)
Adds Shellcode - Shellcode Generator to the Cobalt Strike top menu bar
CSSG is aggressor, .NET, and python scripts used to more easily generate and format beacon shellcode
Generates beacon stageless shellcode with exposed exit...
A shellcode obfuscator written in Python for fun and research. Niernen performs operations like Exclusive-OR, Addition, Substraction, Right Shift and Left Shift and displays output in Hexadecimal format.
Hidden content
SHAREM is intended to be the ultimate Windows shellcode tool, with support to emulate over 12,000 WinAPIs, virtually all user-mode Windows syscalls, and SHAREM provides numerous new features. SHAREM was released on September 29, 2022, at Virus Bulletin, the top malware conference globally...
laZzzy is a shellcode loader that demonstrates different execution techniques commonly employed by malware. laZzzy was developed using different open-source header-only libraries.
Features
Direct syscalls and native (Nt*) functions (not all functions but most)
Import Address Table...
MD5-Monomorphic Shellcode Packer – all payloads have the same MD5 hash
What does it do?
It packs up to 4KB of compressed shellcode into an executable binary, near-instantly. The output file will always have the same MD5 hash: 3cebbe60d91ce760409bbe513593e401
Currently, only Linux x86-64 is...
The more predictable you are, the less you get detected
A technique of hiding malicious shellcode based on low-entropy via Shannon encoding.
Entropy is the measure of the randomness in a set of data (here: shellcode). The higher the entropy, the more random the data is. Shannon Entropy is an...
Converts PE so that it can be then injected just like a normal shellcode.
(At the same time, the output file remains to be a valid PE).
Supports both 32 and 64-bit PEs
Objective:
The goal of this project is to provide a possibility to generate PE files that can be injected with minimal...
Converts PE so that it can be then injected just like a normal shellcode.
(At the same time, the output file remains to be a valid PE).
Supports both 32 and 64-bit PEs
Objective:
The goal of this project is to provide a possibility to generate PE files that can be injected with minimal effort...
NimPackt is a Nim-based packer for .NET (C#) executables and shellcode targeting Windows. It automatically wraps the payload in a Nim binary that is compiled to Native C and as such harder to detect and reverse engineer. There are two main execution methods:
Execute-Assembly re-packs a .NET...
Shellcode Template
An easily modifiable shellcode template for Windows x64/x86
How does it work?
This template is heavily based on Austin Hudson’s (aka SecIdiot) TitanLdr It compiles the project into a PE Executable and extracts the .text section.
Example
The entrypoint of the shellcode...
PELoader implement various shellcode injection techniques, and use libpeconv library to load encrypted PE files instead of injecting shellcode into remote thread.
Following techniques were implemented:
Module Stomping (LoadLibrary)
Module Stomping (NtMapViewOfSection)
Transacted...
Bluffy is a utility which was used in experiments to bypass Anti-Virus products (statically) by formatting shellcode into realistic looking data formats.
Proof-of-concept tools, such as 0xBoku's Ninja_UUID_Runner and ChoiSG's UuidShellcodeExec, inspired the initial concept for Bluffy.
So far...
Bluffy is a utility which was used in experiments to bypass Anti-Virus products (statically) by formatting shellcode into realistic-looking data formats.
So far, we implemented:
UUID
CLSID
SVG
CSS
CSV
Hidden content
Jektor Toolkit v1.0
This utility focuses on shellcode injection techniques to demonstrate methods that malware may use to execute shellcode on a victim system
Dynamically resolves API functions to evade IAT inclusion
Includes usage of undocumented NT Windows API functions
...
Beaconator is an aggressor script for Cobalt Strike used to generate either staged or stageless shellcode and packing the generated shellcode using your tool of choice
Currently, it supports the following tools:
Staged Beacon Generator
Alaris: Alaris is a new and sneaky shellcode loader...
go-shellcode is a repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques.
Hidden content
Sharperner is a tool written in CSharp that generate .NET dropper with AES and XOR obfuscated shellcode. Generated executable can possibly bypass signature check but I cant be sure it can bypass heuristic scanning.
Features
PE binary
Process Hollowing
PPID Spoofing
Random...
Sharperner
Sharperner is a tool written in CSharp that generates a .NET dropper with AES and XOR obfuscated shellcode. A generated executable can possibly bypass signature check but I can’t be sure it can bypass heuristic scanning.
Features
PE binary
Process Hollowing
PPID Spoofing...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.