Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
We are preparing a new version of ShellcodePack! -> Automated and improved DLL sideloading/proxying capacity -> AppDomain injection -> New Responsive GUI! -> Many more new features And of course up to date EDR evasion :) #shellcodepack
7
30
3,506
#ShellcodePack tip: Some of the advanced emulator bypass techniques presented by @EmericNasi at TyphoonCon are implemented in the current version of ShellcodePack.
1
5
18
2,773
#ShellcodePack tip: CPL (Control Panel Applets) and XLL (Excel Add-in) are interesting alternatives to classical EXE/DLL. But you can always just generate a hardened raw shellcode to launch from another launcher like MacroPack (ex. to launch shellcode from LNK, HTA, Office)
4
14
2,922
ShellcodePack 2.0.0 release is available, and for the first time with a GUI! Also cool features such as DLL sideloading, Shellcode weaponization,HTML smuggling, XLL, SE tricks, and much more. Contact us to know more about all the options #shellcodepack #redteam
1
18
1
110
Another #ShellcodePack video by @MC_Info_Sec! Stealthy XLL generation running a Sliver implant. With AV running in background of course :) vimeo.com/728885276

Redteam: Generate a malicious XLL using ShellcodePack

This video shows how to generate a malicious xll payload. The XLL payload is running a sliver implant in a background Excel window. The Sliver raw shellcode implant is generated with the next Sliver...

vimeo.com
1
26
1
98
#shellcodepack is my No1 preference for enhancing my MSF or Cobaltr Strike shellcode too :)
BallisKit
@BallisKit11 Jul 2022
Here is a video about combining #Sliver and #ShellcodePack. Defender bypass included! Courtesy of @MC_Info_Sec vimeo.com/728866443

Redteam: Combine Sliver and ShellcodePack to bypass Defender

This video shows how to generate a malicious exe payload launching a sliver implant. In the first part of the video, we generate a sliver implant that is detected by Defender. In the second part, the...

vimeo.com
1
7
Here is a video about combining #Sliver and #ShellcodePack. Defender bypass included! Courtesy of @MC_Info_Sec vimeo.com/728866443

Redteam: Combine Sliver and ShellcodePack to bypass Defender

This video shows how to generate a malicious exe payload launching a sliver implant. In the first part of the video, we generate a sliver implant that is detected by Defender. In the second part, the...

vimeo.com
1
22
1
71
#ShellcodePack tip: Generate a malicious XLL and display a decoy message after the shellcode is triggered with the next options (also includes AV bypass): -G hello.xll -t CMD --msgbox="Error, invalid office version!" --bypass
1
34
1
98
#ShellcodePack Tip: disguise your executable as a picture using extension and icon spoofing (--unicode-rtlo and --icon options)! #redteam #balliskit
92
350
The next version of #ShellcodePack will provide the capacity to load .NET assemblies with parameters and turn them into weaponized shellcodes. Example with Rubeus:
1
24
1
79
#ShellcodePack news: Currently adding XLL and WLL formats generation in ShellcodePack as well as Domain guardrail directly included inside the shellcode! #RedTeam
1
9
43
#ShellcodePack tip: If you choose to generate a PE format (exe, dll, cpl) you can apply a spoofed signature to it (code adapted from CarbonCopy, thank you @NinjaParanoid)
1
14
39
To improve my VBA direct syscall code, I integrated a modified version of syswhispers1 to #ShellcodePack to be able to generate shellcode calling syscall in both 64process and also wow64 32bit mode. In the pic below I generate NtCreateThread VBA to use with #MacroPack Pro.
18
1
45
Load more