Shellcode

Browse 0 cybersecurity solutions, with 0 security professionals searching monthly

A C++ staged shellcode loader with evasion capabilities, compatible with Sliver and other shellcode sources, designed for offensive security testing.

A payload creation framework for generating and executing C# code payloads with anti-evasion capabilities for offensive security operations.

A Python tool for in-depth PDF analysis and modification.

PhoneyC is a client-side honeypot that emulates vulnerable web browsers to detect and analyze malicious web content and browser-based exploits.

A process scanning tool that detects and dumps malicious implants, shellcodes, hooks, and memory patches in running processes.

Capa is a malware analysis tool that detects capabilities in executable files by analyzing PE, ELF, .NET modules, shellcode, and sandbox reports to identify potential malicious behaviors with ATT&CK framework mapping.

A Linux process injection tool that uses ptrace() to inject assembly-based shellcode into running processes without NULL byte restrictions.

A Python wrapper for the Libemu library that enables shellcode analysis and malicious code examination through programmatic interfaces.

PowerSploit is a PowerShell-based penetration testing framework containing modules for code execution, injection techniques, persistence, and various offensive security operations.

Pwntools is a Python CTF framework and exploit development library that provides tools for rapid prototyping and development of exploits and CTF challenge solutions.

Honeypot tool with bug-catching capabilities and support for multiple protocols.

An open-source shellcode and PE packer for creating and managing portable executable files.

Ivy is a payload creation framework for executing arbitrary VBA source code directly in memory, utilizing programmatical access to load, decrypt, and execute shellcode.

A shellcode generator that creates position-independent code for loading and executing .NET Assemblies, PE files, and Windows payloads from memory.

Charlotte is an undetected C++ shellcode launcher for executing shellcode with stealth.

Tool for enumerating proxy configurations and generating CobaltStrike-compatible shellcode.

CAPA is a static analysis tool that detects and reports capabilities in executable files across multiple formats, mapping findings to MITRE ATT&CK tactics and techniques.

A Python script that converts shellcode into a PE32 or PE32+ file.