Search Results for "shellcode"

...It targets a USB controller bug that requires specialized microcontroller hardware rather than a normal Mac or PC USB stack. The repository includes firmware source code, board support files, shellcode directories, USB handling code, logging helpers, and a Python control tool. It is intended for advanced researchers who understand DFU behavior, embedded development, bootrom analysis, and the risks of hardware-level experimentation. The project documents supported RP2350-based boards and includes build information for people compiling the firmware themselves. ...

...It scans running processes, or even the full system, to identify potentially malicious implants. The tool can recognize and dump suspicious artifacts such as replaced PEs, injected PEs, shellcode, hooks, and in-memory patches. Unlike PE-sieve’s more process-specific workflow, Hollows Hunter can select targets using broader criteria such as process IDs, process names, or creation time. This makes it useful for incident response, memory triage, and forensic investigation of suspicious Windows systems. Its purpose is defensive analysis, helping researchers extract suspicious memory artifacts for deeper review.

...Unlike many disassemblers, bddisasm is built with zero dynamic memory allocation and no external dependencies, making it extremely portable and suitable for constrained environments such as kernels, hypervisors, and embedded systems. The project also includes a companion component called bdshemu, which provides a minimal instruction emulator capable of analyzing shellcode-like behavior in a controlled environment. Its performance is a key strength, achieving millions of decoded instructions per second while maintaining thread safety and deterministic behavior.

Cymothoa is a backdooring tool, that inject backdoor's shellcode directly into running applications. Stealth and lightweight...

libaosc is a library for converting x86 shellcode into randomized ASCII-only shellcode.

Polymorphic shellcode detection library suitable for IDS developement, based on generic nopsled detection and subsequent execution as controlled process. Tested as a Snort plugin.