ShenCode

A versatile tool for working with shellcodes.

Features

Version 0.6.0

• general
  • extract - extract from/to offset
  • formatout - display raw shellcodes in C++, C# and more
  • inject - inject shellcode into process (Windows only)
  • msfvenom - create payloads with msfvenom
• encoder
  • aesenc - Encrypt payload with AES
  • byteswap - New XOR Encryption, Swapping Bytes (Blog Post)
  • xorenc - Encode payload with custom XOR key
  • xorpoly - polymorphic x64 in-memory decoder (for details, visit this Blog Post)
• obfuscator
  • QR-Code hide OpCodes as QR-Code image
  • ROR13 to ROL conversion with custom key (Windows only)
  • UUID obfuscation - Please, check out my Blog Post about this encoder

How to use

Check out the ShenCode Docs for more information.

Release Notes

Improvements

• byteswap - New XOR Encryption, Swapping Bytes
• core - Tested on Linux and Windows
• core - Output optimizations
• core - Better class implementations
• core - Fixed Linux import error
• formatout - Missing comma at EOL of C# output
• formatout - --no-break disable line break in output
• extract - Replaced --first-byte with --start-offset argument
• extract - Replaced --last-byte with --end-offset argument
• extract - Short arguments are -so / -eo
• qrcode - Fixed non functional implementation
• xorpoly - Code optimizations

References

• Byte-Swapping
• In-Memory Decoder
• Function Name Hashing
• Win32API with python3 injection
• Violent python: XOR Encryption
• How to easily encrypt file in python