kleiton0x00/RemoteShellcodeExec kleiton0x00/RemoteShellcodeExec

  • Stars
    star
    220
  • Rank 180,422 (Top 4 %)
  • Language
    C
  • Created over 1 year ago
  • Updated over 1 year ago
Twitter logo Share LinkedIn logo Share Facebook logo Share
kleiton0x00/RemoteShellcodeExec
github

kleiton0x00

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Execute shellcode from a remote-hosted bin file using Winhttp.

RemoteShellcodeExec

A simple PoC of executing shellcode from a remote-hosted bin file using Winhttp. This is demo of the relevant blog post: Shellcodes are dead, long live fileless shellcodes.

TL;DR

  • Executing the shellcode from a remote-hosted server, will make the executable file itself drastically reduce it's entropy.
  • Implemented a simple heap encryption, to avoid the shellcode being visible
  • Profit (0/26 detections)

Demo

U8LjkcA.mp4

Credits

https://decoded.avast.io/threatintel/decoding-cobalt-strike-understanding-payloads/
https://twitter.com/teamcymru_S2/status/1604091964386705409
https://www.huntress.com/blog/hackers-no-hashing-randomizing-api-hashes-to-evade-cobalt-strike-shellcode-detection

More Repositories

1

Advanced-SQL-Injection-Cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.
2,797
star
2

ppmap

A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.
Go
488
star
3

Proxy-DLL-Loads

A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.
C
320
star
4

XSScope

XSScope is one of the most powerful and advanced GUI Framework for Modern Browser exploitation via XSS.
HTML
307
star
5

RedditC2

Abusing Reddit API to host the C2 traffic, since most of the blue-team members use Reddit, it might be a great way to make the traffic look legit.
Python
253
star
6

Shelltropy

A technique of hiding malicious shellcode via Shannon encoding.
Assembly
242
star
7

CORS-one-liner

A one liner Bash command which finds CORS in every possible endpoint.
114
star
8

CRLF-one-liner

A simple Bash one liner with aim to automate CRLF vulnerability scanning.
67
star
9

HTTP-Smuggling-Calculator

Perform TE.CL HTTP Request Smuggling attacks by crafting HTTP Request automatically.
Python
67
star
10

Todesstern

A simple mutator engine which focuses on finding unknown classes of injection vulnerabilities
Python
63
star
11

contexter

Contexter - A secondary context path traversal / server-side parameter pollution testing tool written in Python 3
Python
18
star
12

kleiton0x00.github.io

SCSS
10
star
13

kleiton0x00

2
star