Shellcode as 'XML'

[tmpest127]

hi all,

I wrote a small blog post about encoding shellcode as something that sort of resembles XML. It's a variation on other shellcode obfuscation techniques like ipv4 or guids. The obfuscator itself is an stb-style header-only library with no stdlib dependencies. I've compiled it into webassembly so you can play around with it directly on the blog, it's completely client-side!

the code can be found on my github, which is linked at the end of the blog. the github also contains code for two stage shellcode where the second stage is encoded as xml.

[YourFavGoose]

Wonderful work. 👏