Moderately stealthy shellcode stager.
******,,,******
.*** ...... .**,
**, ........... **
** ,............. **
** (............... . .**
, ,*, *(.................. ( ** .
***********,,,,** (*................ * ** **,
.******, .,*** (,............ * *********.
****** ** (,....(... ( .*. .******
******. *, (/..(,.. , ** *******,
**** ,*. /(/(.. ( .*. ********
**, ** ((.. ( *, ******
** ,*, (/.. . ** .*****
. ,*. (.. .@&... (/ ,*. . *****
* .*. (.. ..&@@@&. .....#@. ( ,* *
* ** (.. .... .@@@@@%. ( ** **
*. ,* /(.. ( ,* ,*
* ** ((.. * , ** ,
. ** /(.. .* ., . ** .
,*****, /(.. * * ( ,*
***, /((... (,. . *. /( ,***.
**. (((........... * (, ,, ,*** ****
(((,................. . .......((/ ,*****
(((........................ .. ..............,((* .**
*............................... .. ........................((/
........................................ .............................(((
....... ... ............. ................. .............. ................../(
......... . .............. ........................ ......................(
.......... .................. .................... ................ ........
........... ....................................................... ........
............ .................................................... .........
This is a very simple shellcode stager. Dynamic function loading, function name obfuscation and in memory shellcode execution. Nothing crazy fance but it works.
- Simply generate your own shellcode using msfvenom, donut, powershellempire etc.
- Insert your routable ip within the cpp file . You can also change the function name exported too optionally.
- Compile the DLL
- Server your shellcode on your webserver
- rundll32.exe stager.dll,update
