Learn how to bypass the YARA rule Windows_Trojan_CobaltStrike_f0b627fc targeting Cobalt Strike’s signature shellcode by replacing key bytes with alternative shellcode and using a Python script to r...
A shellcode loader that leverages advanced techniques such as HellHall's indirect syscalls, Early Bird APC injection, and more, to evade EDR detection and enhance payload delivery.
Learn how to easily create your own malware testing lab with a pre-configured Elastic EDR in Docker, integrated with TCM Security’s AD lab for malware evasion testing.
A dynamic HTTP/s Stager that automates updating decryption variables, saving time and effort in managing shellcode loaders.
Learn how to convert binary (.bin) files to and from C-style arrays using the Linux tool xxd.
Waffles Crypt is a versatile C/C++ tool for encrypting and obfuscating shellcode.
Learn how to easily write custom Shellcode by converting C++ to ASM to Shellcode.
Write-up for VulnLab's Baby2 (Machine).
Learn to store and read shellcode in binary (.bin) files using C++ with sample code with detailed comments.
Write-up for VulnLab's Hybrid (Chain).