ShellcodeCarver

C# Shellcode Carving tool based off of WoollyMammoth toolset. Massively quicker to calculate the necessary SUB instructions when compared with the Python version. Operates with both x86 and x64 bit payloads.

Build

In the root directory use the relevant dotnet RuntimeIdentifiers value for x86 or x64:

# 32-bit
dotnet build -r win10-x86 -c "Release"

# 64-bit
dotnet build -r win10-x64 -c "Release"

Releases

Obtain the latest releases for x86 or x64 here.

Usage

ShellcodeCarver.exe -h

Usage:  [options]

Options:
  -s | --shellcode <value>  Enter Shellcode as opcode format (e.g. \x64\x01)
  -e | --esp-start <value>  Enter ESP address value at start of carved shellcode
  -d | --esp-end <value>    Enter stack address value to write carved shellcode (allow for sufficient space for carved shellcode side)
  -b | --bad-chars <value>  Enter the bad characters withg the hex format separated by spaces, e.g. "0x00 0x01 0xff" or "00 01 ff"
  -f | --format <value>     Enable this option to format output as P(ython) variable, Assembly (n, a, nasm, or asm), or HEX (no value).
  -? | -h | --help          Show help information

Packages

Iced by 0xd4d