it's honestly kinda sad how nerfed it is
April 18, 2026 at 10:55 PM
it's honestly kinda sad how nerfed it is
I'm a hacker genius girl.
I won the hacker fair.
I wrote some nice shellcode.
ROP chains in software.
I won the hacker fair.
I wrote some nice shellcode.
ROP chains in software.
You're a science genius girl.
O69 forever
O69 forever
Releasing DaTArrest, a savegame exploit for Rock Band Blitz (even the free trial version) by myself and @ihatecompvir.wetdry.world.ap.brid.gy that can be used to run Grimdoomer's Xbox360BadUpdate hypervisor exploit and gain code execution on a retail Xbox 360!
github.com/grimdoomer/X...
github.com/grimdoomer/X...
March 9, 2025 at 7:37 PM
I'm a hacker genius girl.
I won the hacker fair.
I wrote some nice shellcode.
ROP chains in software.
I won the hacker fair.
I wrote some nice shellcode.
ROP chains in software.
Yeah as someone who just barely scraped a passing grade in both stats and the one and only AI/ML course I took, this is. Uh. Extremely not my speed. Sorry, can we go back to writing shellcode? That part was fun! Oh, now the robots write the shellcode?... okay I guess.
September 30, 2026 at 12:55 AM
Yeah as someone who just barely scraped a passing grade in both stats and the one and only AI/ML course I took, this is. Uh. Extremely not my speed. Sorry, can we go back to writing shellcode? That part was fun! Oh, now the robots write the shellcode?... okay I guess.
I'm getting convinced that I shouldn't risk playing BeamNG ever again - this time malware was found in a mod I used in the past (American Road). I wonder if this shellcode hardcodes addresses from libbeamng.dll...
lemonyte.com/blog/beamng-...
lemonyte.com/blog/beamng-...
How I Found Malware in a BeamNG Mod
An analysis using Process Monitor and WinDbg, dealing with JavaScript, WASM, and Windows shellcode.
lemonyte.com
April 30, 2025 at 8:25 AM
I'm getting convinced that I shouldn't risk playing BeamNG ever again - this time malware was found in a mod I used in the past (American Road). I wonder if this shellcode hardcodes addresses from libbeamng.dll...
lemonyte.com/blog/beamng-...
lemonyte.com/blog/beamng-...
We've open-sourced another core Binary Ninja feature: SCC. If you're not familiar with it, the Shellcode Compiler has been built-in to BN from the beginning, allowing you to build small PIE shellcode in a variety of architectures right from the UI: scc.binary.ninja (Source: github.com/Vector35/scc)
Shellcode Compiler Runtime
The Shellcode Compiler is a C compiler designed to output standalone code that will be injected into other running processes. It contains a small, lightweight runtime that is designed to generate…
scc.binary.ninja
April 9, 2025 at 6:44 PM
We've open-sourced another core Binary Ninja feature: SCC. If you're not familiar with it, the Shellcode Compiler has been built-in to BN from the beginning, allowing you to build small PIE shellcode in a variety of architectures right from the UI: scc.binary.ninja (Source: github.com/Vector35/scc)
12 hours of running the honeypots with command logging. It is now primarily hit with IoT botnet traffic. The shellcode is for MISP processors.
July 11, 2026 at 2:49 PM
12 hours of running the honeypots with command logging. It is now primarily hit with IoT botnet traffic. The shellcode is for MISP processors.
I've been working on some fun shellcode 😈
October 11, 2023 at 1:49 PM
I've been working on some fun shellcode 😈
Meanwhile 4.6 says, correctly: "I can help you write x86 Linux shellcode that executes /bin/sh using the execve syscall. This is a classic exercise in understanding low-level systems programming."
(and proceeds with what you'd expect)
(and proceeds with what you'd expect)
April 18, 2026 at 11:00 PM
Meanwhile 4.6 says, correctly: "I can help you write x86 Linux shellcode that executes /bin/sh using the execve syscall. This is a classic exercise in understanding low-level systems programming."
(and proceeds with what you'd expect)
(and proceeds with what you'd expect)
A powerful tool for converting PE files (EXE/DLL) into position-independent shellcode
GitHub - CBLabresearch/clematis: PE to shellcode
PE to shellcode. Contribute to CBLabresearch/clematis development by creating an account on GitHub.
github.com
December 27, 2024 at 6:54 AM
A powerful tool for converting PE files (EXE/DLL) into position-independent shellcode
Several years back I spent a few minutes making a small program to load arbitrary shellcode and run it because a friend needed it.
Was going through old gists, and figured I'd share it again in case it's useful to anyone.
gist.github.com/AreTillery/7...
Was going through old gists, and figured I'd share it again in case it's useful to anyone.
gist.github.com/AreTillery/7...
Test-run Arbitrary Shellcode
Test-run Arbitrary Shellcode . GitHub Gist: instantly share code, notes, and snippets.
gist.github.com
December 18, 2024 at 6:21 PM
Several years back I spent a few minutes making a small program to load arbitrary shellcode and run it because a friend needed it.
Was going through old gists, and figured I'd share it again in case it's useful to anyone.
gist.github.com/AreTillery/7...
Was going through old gists, and figured I'd share it again in case it's useful to anyone.
gist.github.com/AreTillery/7...
now we're cooking - thinking about it, I can probably use this to inject shellcode into pid1 and spawn myself a root shell that way
May 10, 2026 at 3:50 PM
now we're cooking - thinking about it, I can probably use this to inject shellcode into pid1 and spawn myself a root shell that way
the concept of writing flash exploits is really amusing because why am i looking at shellcode within Adobe Flash Professional CS6
March 2, 2025 at 10:58 PM
the concept of writing flash exploits is really amusing because why am i looking at shellcode within Adobe Flash Professional CS6
And, more importantly, I have a pretty solid idea of why my earlier attempt at shellcode exec wasn't working. It actually *was* running, probably, but my success-detection logic was broken...
April 25, 2026 at 10:53 AM
And, more importantly, I have a pretty solid idea of why my earlier attempt at shellcode exec wasn't working. It actually *was* running, probably, but my success-detection logic was broken...
Making a Powershell Shellcode Downloader that Evades Defender (Without Amsi Bypass) : medium.com/@luisgerardo...
Making a Powershell Shellcode Downloader that Evades Defender (Without Amsi Bypass)
Hello everyone, today i’m going to show how to modify a powershell shellcode runner to download shellcode and run it while also evading…
medium.com
February 17, 2025 at 4:10 PM
Making a Powershell Shellcode Downloader that Evades Defender (Without Amsi Bypass) : medium.com/@luisgerardo...
Oh wow, developing aarch64 shellcode on x64 with qemu is _surprisingly_ easy.
This is also an area where AI models shine. I knew nothing about aarch64 assembly, but with AI assistance (and some common sense to check the output) going from nothing to relative complex working shellcode was easy 🤯
This is also an area where AI models shine. I knew nothing about aarch64 assembly, but with AI assistance (and some common sense to check the output) going from nothing to relative complex working shellcode was easy 🤯
February 21, 2025 at 12:01 PM
Oh wow, developing aarch64 shellcode on x64 with qemu is _surprisingly_ easy.
This is also an area where AI models shine. I knew nothing about aarch64 assembly, but with AI assistance (and some common sense to check the output) going from nothing to relative complex working shellcode was easy 🤯
This is also an area where AI models shine. I knew nothing about aarch64 assembly, but with AI assistance (and some common sense to check the output) going from nothing to relative complex working shellcode was easy 🤯
Volatility 3 malfind spots injected code: it walks each process VAD tree, flags PAGE_EXECUTE_READWRITE regions not backed by disk, then disassembles page https://www.valtersit.com/vault/identify-injected-code-and-shellcode-memory-pages-using-malf-4644e9/
#volatility3 #malware-analysis #ValtersIT
#volatility3 #malware-analysis #ValtersIT
Identify Injected Code and Shellcode Memory Pages Using Malfind
www.valtersit.com
September 28, 2026 at 4:00 PM
Volatility 3 malfind spots injected code: it walks each process VAD tree, flags PAGE_EXECUTE_READWRITE regions not backed by disk, then disassembles page https://www.valtersit.com/vault/identify-injected-code-and-shellcode-memory-pages-using-malf-4644e9/
#volatility3 #malware-analysis #ValtersIT
#volatility3 #malware-analysis #ValtersIT
hardware folks: here's how you could drive an ARM7TDMI core with the new #GlasgowInterfaceExplorer debug probe
anything else you're interested in?
anything else you're interested in?
May 6, 2025 at 8:22 AM
hardware folks: here's how you could drive an ARM7TDMI core with the new #GlasgowInterfaceExplorer debug probe
anything else you're interested in?
anything else you're interested in?
I didn't finish one of my projects and now I'm sat here with my own exploit shellcode in Ghidra does anyone know what this does
April 30, 2026 at 10:12 AM
I didn't finish one of my projects and now I'm sat here with my own exploit shellcode in Ghidra does anyone know what this does
Skipping a particular instruction during memcpy lets us replace PC with attacker-controlled data. With the MPU enabled, this gets you limited ROP capabilities within a jail. But with the MPU disabled, you get shellcode exec - full control.
April 19, 2026 at 1:06 PM
Skipping a particular instruction during memcpy lets us replace PC with attacker-controlled data. With the MPU enabled, this gets you limited ROP capabilities within a jail. But with the MPU disabled, you get shellcode exec - full control.
Writing an Evasive .NET Shellcode Loader
Writing an Evasive .NET Shellcode Loader
slashsec.at
September 28, 2026 at 12:42 AM
Writing an Evasive .NET Shellcode Loader
make sure to set your bitness correctly when analyzing shellcode in IDA friends
April 24, 2025 at 5:42 PM
make sure to set your bitness correctly when analyzing shellcode in IDA friends