Shellcode
Shellcode groups the cybersecurity tools focused on shellcode, pulled from across every category so you can compare every option in one place. Filter by category or pricing to narrow the field. Independent and vendor-neutral: we never sell rankings.
Browse 0 cybersecurity solutions, with 0 security professionals searching monthly
FEATURED
Open-source C2 framework for red team ops and adversary simulation.
A C++ staged shellcode loader with evasion capabilities, compatible with Sliver and other shellcode sources, designed for offensive security testing.
A payload creation framework for generating and executing C# code payloads with anti-evasion capabilities for offensive security operations.
PhoneyC is a client-side honeypot that emulates vulnerable web browsers to detect and analyze malicious web content and browser-based exploits.
A process scanning tool that detects and dumps malicious implants, shellcodes, hooks, and memory patches in running processes.
Capa is a malware analysis tool that detects capabilities in executable files by analyzing PE, ELF, .NET modules, shellcode, and sandbox reports to identify potential malicious behaviors with ATT&CK framework mapping.
A Linux process injection tool that uses ptrace() to inject assembly-based shellcode into running processes without NULL byte restrictions.
A Python wrapper for the Libemu library that enables shellcode analysis and malicious code examination through programmatic interfaces.
PowerSploit is a PowerShell-based penetration testing framework containing modules for code execution, injection techniques, persistence, and various offensive security operations.
Pwntools is a Python CTF framework and exploit development library that provides tools for rapid prototyping and development of exploits and CTF challenge solutions.
Honeypot tool with bug-catching capabilities and support for multiple protocols.
An open-source shellcode and PE packer for creating and managing portable executable files.
Ivy is a payload creation framework for executing arbitrary VBA source code directly in memory, utilizing programmatical access to load, decrypt, and execute shellcode.
A shellcode generator that creates position-independent code for loading and executing .NET Assemblies, PE files, and Windows payloads from memory.
Charlotte is an undetected C++ shellcode launcher for executing shellcode with stealth.
Tool for enumerating proxy configurations and generating CobaltStrike-compatible shellcode.
CAPA is a static analysis tool that detects and reports capabilities in executable files across multiple formats, mapping findings to MITRE ATT&CK tactics and techniques.
