GitHub

Explanation of the "Example Shellcode" Found In Our Malware Scanners

This code is partly psychotic and can prevent normal stuff from running so modify for it in your systems with our malware scanners. Breakdown of the Shellcode \x60 (PUSHA): This instruction pushes all ...
GitHub

A memory-based evasion technique which makes shellcode invisible from process start to end.

I wanted to share this shellcode self-injection POC to showcase some AV/EDR evasion concepts that may turn useful for Red Teaming. Just a few weeks ago I came up with a custom in-memory evasion ...
Microsoft

Shellcode Analysis via MSEC Debugger Extensions

In a previous post we provided some background on the !exploitable Crash Analyzer which was released earlier this year. One of the things that we didn’t mention is that !exploitable is just one of the ...
LinkedIn

Reverse Connection Shellcode

Reverse connection shellcode makes a connection from a hacked system to a different system where it can be caught using network tools such as netcat. Once the shellcode is connected, it spawns an ...