Top 23 Shellcode Open-Source Projects

• pwntools

  8 11,447 9.1 Python

  CTF framework and exploit development library

  

Project mention: PwnTools for Exploit Development | dev.to | 2023-08-20

The Pwntools library stands out as a sophisticated toolset for CTF enthusiasts and security researchers. It aids in creating and executing shellcode, designing payloads, and interacting with remote processes. For instance, the context feature allows developers to switch between different architectures effortlessly, while the 'tube' module streamlines the communication between local and remote processes. And it's not just limited to Linux; the library has support for various platforms including Windows, making it versatile and comprehensive.

• pe_to_shellcode

  4 2,197 3.8 C++

  Converts PE into a shellcode

Project mention: Bypassing Windows Defender (10 Ways) | dev.to | 2023-08-27

Finally, we also have the option to transform a native PE back to shellcode. This may be done, for example, via hasherezade's pe_to_shellcode tool.

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• shad0w

  2 1,981 0.0 C

  A post exploitation framework designed to operate covertly on heavily monitored environments

• venom

  2 1,705 0.0 Shell

  venom - C2 shellcode generator/compiler/handler (by r00t-3xp10it)

• amber

  1 1,116 2.9 Go

  Reflective PE packer. (by EgeBalci)

• Zeratool

  9 1,087 2.9 Python

  Automatic Exploit Generation (AEG) and remote flag capture for exploitable CTF problems

• cemu

  2 908 4.8 Python

  Cheap EMUlator: lightweight multi-architecture assembly playground (by hugsy)

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• bddisasm

  3 838 7.4 C

  bddisasm is a fast, lightweight, x86/x64 instruction decoder. The project also features a fast, basic, x86/x64 instruction emulator, designed specifically to detect shellcode-like behavior.

  

• monomorph

  7 774 10.0 C

  MD5-Monomorphic Shellcode Packer - all payloads have the same MD5 hash

• modernish

  3 729 6.4 Shell

  Modernish is a library for writing robust, portable, readable, and powerful programs for POSIX-based shells and utilities.

  

• FunctionStomping

  7 669 2.5 Rust

  Shellcode injection technique. Given as C++ header, standalone Rust program or library.

• DripLoader

  6 666 1.8 C++

  Evasive shellcode loader for bypassing event-based injection detection (PoC)

• Shoggoth

  6 563 5.7 C++

  Shoggoth: Asmjit Based Polymorphic Encryptor

• MicroBackdoor

  1 547 2.6 C++

  Small and convenient C2 tool for Windows targets. [ Русский -- значит нахуй! ]

• owt

  18 427 0.0 Shell

  Update Version 3.1 added free SMS messaging.

• rust-windows-shellcode

  3 252 0.0 Rust

  Windows shellcode development in Rust

• ntqueueapcthreadex-ntdll-gadget-injection

  1 222 1.5 C

  This novel way of using NtQueueApcThreadEx by abusing the ApcRoutine and SystemArgument[0-3] parameters by passing a random pop r32; ret gadget can be used for stealthy code injection.

• peekaboo

  1 187 0.0 C++

  Simple undetectable shellcode and code injector launcher example. Inspired by RTO malware development course.

• ShellWasp

  1 150 4.6 Python

  ShellWasp is a tool to help build shellcode that utilizes Windows syscalls, while overcoming the portability problem associated with Windows syscalls. ShellWasp is built for 32-bit, WoW64. ShellWasp 2.0 includes novel ways to invoke the syscall in WoW64.

• Theattacker-Crypter

  1 146 7.5 C#

  Tool to evade Antivirus With Different Techniques

Project mention: Theattacker-Crypter - Tool to evade Antivirus With Different Techniques | /r/CKsTechNews | 2023-05-18

• DoubleStar

  1 144 0.0 JavaScript

  A personalized/enhanced re-creation of the Darkhotel "Double Star" APT exploit chain with a focus on Windows 8.1 and mixed with some of my own techniques (by forrest-orr)

• Simple-Polymorphic-Engine-SPE32

  1 116 0.7 Assembly

  Simple Polymorphic Engine (SPE32) is a simple polymorphic engine for encrypting code and data. It is an amateur project that can be used to demonstrate what polymorphic engines are.

• LearnPwn

  4 93 10.0 Python

  Learn Binary Exploitation with sample problems.

• SaaSHub

  www.saashub.com sponsored

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

Shellcode related posts

• GitHub - DavidBuchanan314/monomorph: MD5-Monomorphic Shellcode Packer - all payloads have the same MD5 hash
  1 project | /r/bag_o_news | 16 Nov 2022
• How realistic is it to inject malicious code into Compiler GCC or Clang without anyone noticing?
  1 project | /r/C_Programming | 14 Nov 2022
• monomorph: MD5-Monomorphic Shellcode Packer - Pack arbitrary shellcode into an executable that always has the same MD5 hash
  1 project | /r/programming | 28 Sep 2022
• monomorph: MD5-Monomorphic Shellcode Packer - Pack arbitrary shellcode into an executable that always has the same MD5 hash
  1 project | /r/crypto | 28 Sep 2022
• monomorph: MD5-Monomorphic Shellcode Packer - Pack arbitrary shellcode into an executable that always has the same MD5 hash
  1 project | /r/RedSec | 27 Sep 2022
• Show HN: Monomorph – pack any shellcode into a binary with a fixed MD5 hash
  1 project | news.ycombinator.com | 26 Sep 2022
• Zeratool v2.2: Automatic Exploit Generation (AEG) with automated remote libc leaking and ret2dlresolve rop chain generation for exploitable CTF problems.
  1 project | /r/RedSec | 29 Jul 2022
• A note from our sponsor - WorkOS
  workos.com | 25 Apr 2024

  The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning. Learn more →

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com