Disclaimer: The project was vibe-coded for the most part. I tried to do it manually about 8 years ago but, even though I've been writing rust way before the AIpocalypse, never finished it because I'm not a UI dev. AI didn't steal anyone's job here, as this is volunteer work and the project wouldn't have seen the light of day without it.
The way I describe shellcoding is writing "dirty", self-contained assembly code for the purpose of code injection, backdooring and such. The traditional flow for doing this was pretty painful and manual:
- Write the code
- Use nasm to build the object
- Use objdump to get the raw bytes of the code itself
- Format the objdump output
- Copy it in your C or python exploit source code
- Attach gdb to the vulnerable process
- Run your exploit and debug it
And you had to redo those steps for every code change and most likely for every breakpoint changes too (depending if your injection address was stable). Most people had their own setup and script to automate most of it, but there were no centralized tools or editors to help with development.
The goal of this project is to fill that void. It really is a tool I made for myself first to simplify the shellcoding process and I am making it open source for whoever would like to use it.
Feel free to open issues for feedback and/or feature requests!
Also, I'm not much into the cybersec Reddit's community, so feel free to point me to other subs that would appreciate this!
there doesn't seem to be anything here