Skip to content

Latest commit

 

History

History
29 lines (14 loc) · 649 Bytes

File metadata and controls

29 lines (14 loc) · 649 Bytes

payloadTests

PoCs for various shellcode injection techniques. Mostly golang.

this repo is mostly for my own educational purposes, so I wouldn't consider these opsec-safe. ymmv

currently using package "golang.org/x/sys/windows" for some WinAPI stuff

shellcode in buffer pops calc.exe

Techniques

A lot of these examples follow the classic "Allocate-Inject-Execute" pattern. Some target the current process's execution space, while other abuse a remote process.

CreateFiber

CreateRemoteThread

Process Hollowing (32 and 64 bit)

QueueUserApc

RtlCreateUserThread

Source

https://github.com/Ne0nd0g/go-shellcode/