Search Results for "shellcode"

...The repository covers areas such as anti-debugging, cryptographic helpers, fingerprinting, process creation, process injection, networking, library loading, and string handling. It also includes examples involving shellcode execution, privilege-related behavior, and Windows internals. Individual components can be examined separately rather than used as one monolithic program. Because the code can enable harmful behavior, it is best handled only in isolated, authorized security research environments.

pe_to_shellcode is a research-oriented tool that converts a Windows Portable Executable into a form that can be loaded from memory like shellcode. The resulting file remains a valid PE while also being modified so execution can begin from the start of the buffer. The project supports both 32-bit and 64-bit PE files. Its goal is to add a reflective loading stub after compilation, instead of requiring the developer to build the PE with reflective loading already integrated.

Polymorphic shellcode detection library suitable for IDS developement, based on generic nopsled detection and subsequent execution as controlled process. Tested as a Snort plugin.