Shellcodev

Shellcodev is a tool designed to help and automate the process of shellcode creation.

Attribution

This project is based on WinREPL by zerosum0x0

Commands

.help                   Show this help screen.
.registers              Show more detailed register info.
.list                   Show list of previously executed assembly instructions.
.edit line              Edit specified line in list.
.del line               Delete specified line from list.
.xor e/d/status         Enable, disable or show status of nullbyte xoring.
.read addr size         Read from a memory address.
.write addr hexdata     Write to a memory address.
.toshell format         Convert list to selected shellcode format. Available formats: c, cs, raw
.inject pid             Test shellcode by injecting it into the process. Works currently only on x86!
.allocate size          Allocate a memory buffer.
.loadlibrary path       Load a DLL into the process.
.kernel32 func          Get address of a kernel32 export.
.shellcode hexdata      Execute raw shellcode.
.peb                    Loads PEB into accumulator.
.reset                  Start a new environment.
.quit                   Exit the program.

Added features

All the instructions provided by user are now stored. User is now able to list, edit and delete instructions which makes shellcodes much easier to modify. Everything is in real-time, so any changes made in list also changes the register values.

Listing

String snippets

Nullbyte handling

Goal features

• Done: String converter: String provided by user will be automatically converted to hex and encoded with little endian. In case of nullbytes, they will be removed by encrypting data with xor.
• Done: Shellcode runner: User will be able to test shellcode by injecting it into the process.
• Done: More formats.
• Done: Make nullbyte obfuscation optional
• Loop support

References

Libraries used to assemble instructions:

• AsmJit
• AsmTK