Search Results for "shellcode"
Sort By:
Showing 25 open source projects for "shellcode"
View related business solutions-
Our Free Plans just got better! | Auth0You asked, we delivered! Auth0 is excited to expand our Free and Paid plans to include more options so you can focus on building, deploying, and scaling applications without having to worry about your security. Auth0 now, thank yourself later.
-
Ship Agents FasterGemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.
-
1
usbliter8
An A12/A13 SecureROM exploit
...It targets a USB controller bug that requires specialized microcontroller hardware rather than a normal Mac or PC USB stack. The repository includes firmware source code, board support files, shellcode directories, USB handling code, logging helpers, and a Python control tool. It is intended for advanced researchers who understand DFU behavior, embedded development, bootrom analysis, and the risks of hardware-level experimentation. The project documents supported RP2350-based boards and includes build information for people compiling the firmware themselves. ... -
2
hollows_hunter
Recognizes and dumps a variety of potentially malicious implants
...It scans running processes, or even the full system, to identify potentially malicious implants. The tool can recognize and dump suspicious artifacts such as replaced PEs, injected PEs, shellcode, hooks, and in-memory patches. Unlike PE-sieve’s more process-specific workflow, Hollows Hunter can select targets using broader criteria such as process IDs, process names, or creation time. This makes it useful for incident response, memory triage, and forensic investigation of suspicious Windows systems. Its purpose is defensive analysis, helping researchers extract suspicious memory artifacts for deeper review. -
3
The Bitdefender disassembler
bddisasm is a fast, lightweight, x86/x64 instruction decoder
...Unlike many disassemblers, bddisasm is built with zero dynamic memory allocation and no external dependencies, making it extremely portable and suitable for constrained environments such as kernels, hypervisors, and embedded systems. The project also includes a companion component called bdshemu, which provides a minimal instruction emulator capable of analyzing shellcode-like behavior in a controlled environment. Its performance is a key strength, achieving millions of decoded instructions per second while maintaining thread safety and deterministic behavior. -
4
Merlin HTTP/2
Merlin is a cross-platform post-exploitation HTTP/2 Command
Merlin is a cross-platform post-exploitation Command & Control server and agent written in Go. The Merlin server is a self-contained command line program that requires no installation. You just simply download it and run it. The command-line interface only works great if it will be used by a single operator at a time. The Merlin agent can be controlled through Mythic, which features a web-based user interface that enables multiplayer support, and a slew of other features inherent to the project. -
MongoDB Atlas runs apps anywhereMongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
-
5
PoshC2
C2 framework used to aid red teamers with post-exploitation
...Out-of-the-box PoshC2 comes PowerShell/C# and Python2/Python3 implants with payloads written in PowerShell v2 and v4, C++ and C# source code, a variety of executables, DLLs and raw shellcode in addition to a Python2/Python3 payload. These enable C2 functionality on a wide range of devices and operating systems, including Windows, *nix and OSX. Shellcode containing in-build AMSI bypass and ETW patching for a high success rate and stealth. Auto-generated Apache Rewrite rules for use in a C2 proxy, protecting your C2 infrastructure and maintaining good operational security. ... -
6
pe_to_shellcode
Converts PE into a shellcode
pe_to_shellcode is a research-oriented tool that converts a Windows Portable Executable into a form that can be loaded from memory like shellcode. The resulting file remains a valid PE while also being modified so execution can begin from the start of the buffer. The project supports both 32-bit and 64-bit PE files. Its goal is to add a reflective loading stub after compilation, instead of requiring the developer to build the PE with reflective loading already integrated. -
7
sRDI
Shellcode implementation of Reflective DLL Injection
sRDI is a compact project that implements a shellcode form of Reflective DLL Injection, enabling DLLs to be converted into position-independent shellcode and loaded in memory by a small in-process PE loader. The codebase groups a C implementation of a reflective PE loader with multiple loader/wrapper components (native C loader, a .NET loader, Python and PowerShell conversion helpers) so authors can produce and embed sRDI blobs in different environments. -
8
Alan Framework
A C2 post-exploitation framework
...JavaScript script execution (in-memory without third party dependency) Fully compliant SOCKS5 proxy. Supported agent types: Powershell (x86/x64), DLL (x86/x64), Executable (x86/x64), Shellcode (x86/x64). Server.exe can be executed in Linux (via dotnet core) The network communication is fully encrypted with a session key not recoverable from the agent binary or from a traffic dump. Communication performed via HTTP/HTTPS. No external dependencies or libraries need to be installed. A powerful command shell. The agent configuration can be updated on the fly (you can change port and protocol too). -
9
VENOM C2 shellcode
C2 shellcode generator/compiler/handler
The script will use msfvenom (metasploit) to generate shellcode in different formats ( C# | python | ruby | dll | msi | hta-psh | doc | apk | macho | elf | deb | mp4 | etc ) injects the shellcode generated into one template (example: python) "the python function will execute the shellcode into ram" and uses compilers like gcc (gnu cross compiler) or mingw32 or pyinstaller to build the executable file. -
AI-powered service management for IT and enterprise teamsGive your IT, operations, and business teams the ability to deliver exceptional services—without the complexity. Maximize operational efficiency with refreshingly simple, AI-powered Freshservice.
-
10
Sploitware
Vulnerability analytics
...It brings together links to tutorials, tools, writeups, and CTF resources so that security learners don’t have to hunt across the internet for a coherent path. The focus is on practical exploitation skills: understanding memory corruption, reverse engineering, shellcode, privilege escalation, and platform specifics. By being a single, public list, it lowers the barrier for newcomers who want to go from “I know nothing about exploitation” to “I can follow a CTF writeup” in a guided way. It is also helpful for defenders and security engineers who want to understand offensive techniques to harden systems. ... -
11
ConvertShellCode
Disassemble Shellcode.
ConvertShellcode takes Shellcode as input and disassemble it in a list of instructions in assembly language. This is a CLI tool. Supported formats: - "\xEB\x08\xBA\x4D\x11\x86\x7C\xFF\xD2\xCC\xE8\xF3\xFF\xFF\xFF\x63" - "%uc92b%ue983%ud9eb%ud9ee%u2474%u5bf4%u7381%u1313%u2989" - "%40%6E%40%6E%40%6E%40%6E%40%6E%40%6E%40%6E%40%6E%97%6E%40" - "%u9090" - "\u9090" - "邐" Also take a look at: - https://zeltser.com/convert-shellcode-to-assembly - http://www.aldeid.com/wiki/ConvertShellcode -
12
venom - shellcode generator
msfvenom shellcode generator/compiler/listenner
The script will use msfvenom (metasploit) to generate shellcode in diferent formats ( c | python | ruby | dll | msi | hta-psh ), injects the shellcode generated into one funtion (example: python) "the python funtion will execute the shellcode in ram" and uses compilers like: gcc (gnu cross compiler) or mingw32 or pyinstaller to build the executable file, also starts a multi-handler to recibe the remote connection (reverse shell or meterpreter session). -- 'shellcode generator' tool reproduces some of the technics used by Veil-Evasion framework, unicorn.py, powersploit, etc,etc,etc.."... -
13
mips-injectso
Tool for injecting libs on mips/mipsel devices
This tool attaches to a specified process, modifies it's stack by copying small shellcode there, launches it and restores process previous state. Shellcode allows for loading custom .so. Either temporary (dlopen, dlclose) or "resident" (dlopen and no dlclose). -
14
PowerSploit
A PowerShell Post-Exploitation Framework
PowerSploit is a PowerShell-based post‑exploitation framework widely used by penetration testers, red‑teamers, and security researchers. It includes modules for code execution, introspection, lateral movement, persistence, and data exfiltration—deeply integrated into Windows environments. -
15
PowerSploit PowerShell
A PowerShell Post-Exploitation Framework
PowerSploit is a collection of PowerShell modules that historically served as a toolkit for post-exploitation tasks, red-team exercises, and offensive-security research—covering areas like reconnaissance, lateral movement, persistence, and situational awareness. The repository bundles many focused scripts: code to enumerate system and Active Directory information, payload generation helpers, in-memory execution utilities, and modules to interact with credentials and services. Because the... -
16
netool toolkit 4.6
MitM pentesting opensource toolkit
...Rootsector module allows you to automate some attacks over DNS_SPOOF + MitM (phishing - social engineering) using metasploit, apache2 and ettercap frameworks. Like the generation of payloads, shellcode, backdoors delivered using dns_spoof and MitM method to redirect a target to your phishing webpage. recent as introducted the scanner inurlbr (by cleiton) -
17
ExploitCentral
Introduction to exploit development
ExploitCentral is dedicated to helping learn the theory and practice required to approach exploit development in a straight forward manner. -
18
HoneyDrive
Honeypots in a box! HoneyDrive is the premier honeypot bundle distro.
HoneyDrive is the premier honeypot Linux distro. It is a virtual appliance (OVA) with Xubuntu Desktop 12.04.4 LTS edition installed. It contains over 10 pre-installed and pre-configured honeypot software packages such as Kippo SSH honeypot, Dionaea and Amun malware honeypots, Honeyd low-interaction honeypot, Glastopf web honeypot and Wordpot, Conpot SCADA/ICS honeypot, Thug and PhoneyC honeyclients and more. Additionally it includes many useful pre-configured scripts and utilities to... -
19
MonsterSoftware GNU Programs
MonsterSoftware Programs
Ücretsiz Olark Win32 Taban Gnu Programları İndirebilirsiniz. Win32-based GNU Free Programs To Download shellcode. -
20
cymothoa
Cymothoa is a stealth and lightweight backdooring tool.
Cymothoa is a backdooring tool, that inject backdoor's shellcode directly into running applications. Stealth and lightweight... -
21
A new form of shellcode obfuscation, which relies on simple mathematics to make it possible. Can be ported to virtually any language!
-
22
-
23
Polymorphic shellcode detection library suitable for IDS developement, based on generic nopsled detection and subsequent execution as controlled process. Tested as a Snort plugin.
-
24
-
25
Expluit0
Expluit0 is Library for Python. It is used to generate ShellCode, to t
Expluit0 is Library for Python. It is used to generate ShellCode, to test ShellCode or to get more things for Exploit.
- Previous
- You're on page 1
- Next
