Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
45 changes: 17 additions & 28 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,48 +2,37 @@

**A versatile tool for working with shellcodes.**

![](shencode-060.png)
![|800](shencode-061.png)

## Features

### Version 0.6.0
### Version 0.6.1

- general
- `extract` - [extract](https://github.com/psycore8/shencode/wiki/extract) from/to offset
- `formatout` - [display raw shellcodes](https://github.com/psycore8/shencode/wiki/formatout) in `C++, C#` and more
- `inject` - [inject shellcode](https://github.com/psycore8/shencode/wiki/inject) into process (Windows only)
- `msfvenom` - [create payloads](https://github.com/psycore8/shencode/wiki/msfvenom) with msfvenom
- `extract` - [extract](https://www.heckhausen.it/shencode/wiki/extract) from/to offset
- `formatout` - [display raw shellcodes](https://www.heckhausen.it/shencode/wiki/formatout) in `C++, C#` and more
- `inject` - [inject shellcode](https://www.heckhausen.it/shencode/wiki/inject) into process (Windows only)
- `msfvenom` - [create payloads](https://www.heckhausen.it/shencode/wiki/msfvenom) with msfvenom
- encoder
- `aesenc` - [Encrypt](https://github.com/psycore8/shencode/wiki/aesenc) payload with AES
- `byteswap` - New XOR Encryption, [Swapping Bytes](https://github.com/psycore8/shencode/wiki/byteswap) ([Blog Post](https://www.nosociety.de/en:it-security:blog:obfuscation_byteswapping))
- `xorenc` - [Encode payload](https://github.com/psycore8/shencode/wiki/xorenc) with custom XOR key
- `xorpoly` - [polymorphic x64](https://github.com/psycore8/shencode/wiki/xorpoly) in-memory decoder (for details, visit this [Blog Post](https://www.nosociety.de/en:it-security:blog:obfuscation_polymorphic_in_memory_decoder))
- `aesenc` - [Encrypt](https://www.heckhausen.it/shencode/wiki/aesenc) payload with AES
- `byteswap` - New XOR Encryption, [Swapping Bytes](https://www.heckhausen.it/shencode/wiki/byteswap) ([Blog Post](https://www.nosociety.de/en:it-security:blog:obfuscation_byteswapping))
- `xorenc` - [Encode payload](https://www.heckhausen.it/shencode/wiki/xorenc) with custom XOR key
- `xorpoly` - [polymorphic x64](https://www.heckhausen.it/shencode/wiki/xorpoly) in-memory decoder (for details, visit this [Blog Post](https://www.nosociety.de/en:it-security:blog:obfuscation_polymorphic_in_memory_decoder))
- obfuscator
- `QR-Code` hide OpCodes as [QR-Code image](https://github.com/psycore8/shencode/wiki/qrcode)
- `ROR13` to `ROL` [conversion with custom key](https://github.com/psycore8/shencode/wiki/ror2rol) (Windows only)
- `UUID` [obfuscation](https://github.com/psycore8/shencode/wiki/uuid) - Please, check out my [Blog Post](https://www.nosociety.de/en:it-security:blog:obfuscation_shellcode_als_uuids_tarnen_-_teil_1) about this encoder
- `Feed` - Splits Bytes in a [feed.xml file](https://www.heckhausen.it/shencode/wiki/feed) as article IDs
- `QR-Code` hide OpCodes as [QR-Code image](https://www.heckhausen.it/shencode/wiki/qrcode)
- `ROR13` to `ROL` [conversion with custom key](https://www.heckhausen.it/shencode/wiki/ror2rol) (Windows only)
- `UUID` [obfuscation](https://www.heckhausen.it/shencode/wiki/uuid) - Please, check out my [Blog Post](https://www.nosociety.de/en:it-security:blog:obfuscation_shellcode_als_uuids_tarnen_-_teil_1) about this encoder

## How to use

Check out the [ShenCode Docs](https://heckhausen.it/shencode/wiki/) for more information.

## Release Notes

#### Improvements

- `byteswap` - New XOR Encryption, Swapping Bytes
- `core` - Tested on Linux and Windows
- `core` - Output optimizations
- `core` - Better class implementations
- `core` - Fixed Linux import error
- `formatout` - Missing comma at EOL of C# output
- `formatout` - `--no-break` disable line break in output
- `extract` - Replaced `--first-byte` with `--start-offset` argument
- `extract` - Replaced `--last-byte` with `--end-offset` argument
- `extract` - Short arguments are `-so / -eo`
- `qrcode` - Fixed non functional implementation
- `xorpoly` - Code optimizations
-
- `feed` - A new obfuscation module
- `core` - added some different logos for startup

## References

- [Byte-Swapping](https://www.nosociety.de/en:it-security:blog:obfuscation_byteswapping)
Expand Down
2 changes: 1 addition & 1 deletion _dev.bat
Original file line number Diff line number Diff line change
Expand Up @@ -9,5 +9,5 @@ rem doskey shen-ror=python3.12 shencode.py ror2rol $*
rem doskey shen-uid=python3.12 shencode.py uuid $*
rem doskey shen-xop=python3.12 shencode.py xorpoly $*
rem doskey shen-xoe=python3.12 shencode.py xorenc $*
doskey shc=python3.12 shencode.py $*
doskey shc=python shencode.py $*
doskey /MACROS
235 changes: 235 additions & 0 deletions feedtest.x
Original file line number Diff line number Diff line change
@@ -0,0 +1,235 @@
<?xml version='1.0' encoding='utf-8'?>
<feed>
<link href="https://www.microloft.com/feed.xml" rel="self" type="application/atom+xml"/>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/feed.xml</id>
<title type="html">Developer News</title>
<subtitle>The latest developer news from microloft.com</subtitle>
<author>
<name>Bill Ports</name>
</author>
<entry>
<title type="html">Title 1</title>
<link href="https://www.microloft.com/01/02/title1" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/554889e54883ec40</id>
</entry>
<entry>
<title type="html">Title 2</title>
<link href="https://www.microloft.com/02/02/title2" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/4831c0488945f848</id>
</entry>
<entry>
<title type="html">Title 3</title>
<link href="https://www.microloft.com/03/02/title3" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/8945f0488945e848</id>
</entry>
<entry>
<title type="html">Title 4</title>
<link href="https://www.microloft.com/04/02/title4" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/8945e0488945d848</id>
</entry>
<entry>
<title type="html">Title 5</title>
<link href="https://www.microloft.com/05/02/title5" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/8945d0488945c850</id>
</entry>
<entry>
<title type="html">Title 6</title>
<link href="https://www.microloft.com/06/02/title6" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/48b857696e457865</id>
</entry>
<entry>
<title type="html">Title 7</title>
<link href="https://www.microloft.com/07/02/title7" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/631148c1e00848c1</id>
</entry>
<entry>
<title type="html">Title 8</title>
<link href="https://www.microloft.com/08/02/title8" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/e80850488965d848</id>
</entry>
<entry>
<title type="html">Title 9</title>
<link href="https://www.microloft.com/09/02/title9" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/31c065488b406048</id>
</entry>
<entry>
<title type="html">Title 10</title>
<link href="https://www.microloft.com/010/02/title10" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/8b4018488b402048</id>
</entry>
<entry>
<title type="html">Title 11</title>
<link href="https://www.microloft.com/011/02/title11" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/8b18488b03488b40</id>
</entry>
<entry>
<title type="html">Title 12</title>
<link href="https://www.microloft.com/012/02/title12" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/204889c34831c98b</id>
</entry>
<entry>
<title type="html">Title 13</title>
<link href="https://www.microloft.com/013/02/title13" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/433c4801d84831c9</id>
</entry>
<entry>
<title type="html">Title 14</title>
<link href="https://www.microloft.com/014/02/title14" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/80c1888b04084801</id>
</entry>
<entry>
<title type="html">Title 15</title>
<link href="https://www.microloft.com/015/02/title15" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/d88b481448894df8</id>
</entry>
<entry>
<title type="html">Title 16</title>
<link href="https://www.microloft.com/016/02/title16" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/8b481c4801d94889</id>
</entry>
<entry>
<title type="html">Title 17</title>
<link href="https://www.microloft.com/017/02/title17" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/4df08b48204801d9</id>
</entry>
<entry>
<title type="html">Title 18</title>
<link href="https://www.microloft.com/018/02/title18" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/48894de88b482448</id>
</entry>
<entry>
<title type="html">Title 19</title>
<link href="https://www.microloft.com/019/02/title19" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/01d948894de04831</id>
</entry>
<entry>
<title type="html">Title 20</title>
<link href="https://www.microloft.com/020/02/title20" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/c04831c9488b75d8</id>
</entry>
<entry>
<title type="html">Title 21</title>
<link href="https://www.microloft.com/021/02/title21" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/488b7de8fc8b3c87</id>
</entry>
<entry>
<title type="html">Title 22</title>
<link href="https://www.microloft.com/022/02/title22" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/4801dfb108f3a674</id>
</entry>
<entry>
<title type="html">Title 23</title>
<link href="https://www.microloft.com/023/02/title23" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/0948ffc0483b45f8</id>
</entry>
<entry>
<title type="html">Title 24</title>
<link href="https://www.microloft.com/024/02/title24" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/75e2488b4de0488b</id>
</entry>
<entry>
<title type="html">Title 25</title>
<link href="https://www.microloft.com/025/02/title25" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/55f0668b04418b04</id>
</entry>
<entry>
<title type="html">Title 26</title>
<link href="https://www.microloft.com/026/02/title26" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/824801d84831d248</id>
</entry>
<entry>
<title type="html">Title 27</title>
<link href="https://www.microloft.com/027/02/title27" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/31c95148b963616c</id>
</entry>
<entry>
<title type="html">Title 28</title>
<link href="https://www.microloft.com/028/02/title28" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/632e657865514889</id>
</entry>
<entry>
<title type="html">Title 29</title>
<link href="https://www.microloft.com/029/02/title29" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/e1b2014883e4f048</id>
</entry>
<entry>
<title type="html">Title 30</title>
<link href="https://www.microloft.com/030/02/title30" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/83ec20ffd04883c4</id>
</entry>
<entry>
<title type="html">Title 31</title>
<link href="https://www.microloft.com/031/02/title31" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/384883c4184883c4</id>
</entry>
<entry>
<title type="html">Title 32</title>
<link href="https://www.microloft.com/032/02/title32" rel="alternate" type="text/html" title="Title 1"/>
<published>2024-12-22 12:15:03.104716</published>
<updated>2024-12-22 12:15:03.104716</updated>
<id>https://www.microloft.com/085dc3</id>
</entry>
</feed>
Loading
Loading