Shellcode loader builder for metasploit/cobalt-strike payloads. Written in C#. The tool is designed to work with shellcode — small fragments of machine code that are often used to exploit vulnerabilities or perform specific tasks in process memory.
Features
Compress: Simple implementation of compression and hiding of static signatures of the main loader.
Shellcode Encryption: Shellcode Byte Encryption and Decryption and their Implementation in Memory.
Autorun: Autostart application after OS restart.
Conditional Compilation: Allows the builder to include only the features and options chosen by the user, making the final build more streamlined.
Custom Renaming and Obfuscation: Includes customizable renaming of functions and string encryption to make the code less readable and harder to analyze.
Amsi/Etw patches: Support for "EtwEventTrace" patches and "AmsiScanBuffer" function
download:
Features
Compress: Simple implementation of compression and hiding of static signatures of the main loader.
Shellcode Encryption: Shellcode Byte Encryption and Decryption and their Implementation in Memory.
Autorun: Autostart application after OS restart.
Conditional Compilation: Allows the builder to include only the features and options chosen by the user, making the final build more streamlined.
Custom Renaming and Obfuscation: Includes customizable renaming of functions and string encryption to make the code less readable and harder to analyze.
Amsi/Etw patches: Support for "EtwEventTrace" patches and "AmsiScanBuffer" function
download: