AlphabeticalPolyShellGen

KO | EN

gitlite — search

#hacktoberfest #react #typescript #golang #go #android #linux #nodejs #macos #windows #cli #kubernetes #mcp #open-source

AlphabeticalPolyShellGen

(★ 145)

Generate an Alphabetical Polymorphic Shellcode

파일 탐색기

최종 버전 다운로드 (.zip)

- AlphabeticalPolyGen.vcxproj
- AlphabeticalPolyGen.vcxproj.filters
- AlphabeticalPolyGen.vcxproj.user
- Main.c
- PolyShellcodeGen.h
- Utilities.h
- LocalShellcodeExec.c
- LocalShellcodeExec.vcxproj
- LocalShellcodeExec.vcxproj.filters
- LocalShellcodeExec.vcxproj.user
AlphabeticalPolyGen.sln
AlphabeticalShellcodeDecode.asm
LICENSE
README.md
XorShellcodeDecode.asm

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

## AlphabeticalPolyShellGen: Generate an Alphabetical Polymorphic Shellcode

## How Does It Work

* First, the input shellcode is encoded using the same logic behind [Alphabetfuscation](https://github.com/Maldev-Academy/Alphabetfuscation), which is a shellcode obfuscation method that represents opcode bytes as ASCII. And since this method uses a random ASCII offset per byte, the encoded output differs on every run.
* The **first shellcode**, [g_AlphabeticalDecoder](https://github.com/Maldev-Academy/AlphabeticalPolyShellGen/blob/main/AlphabeticalPolyGen/Main.c#L236), is prepended with the encoded Alphabetical shellcode, after being configured with the required data for decoding.
* The `g_AlphabeticalDecoder` is then itself encoded using a simple XOR routine; [XorEncrypt](https://github.com/Maldev-Academy/AlphabeticalPolyShellGen/blob/main/AlphabeticalPolyGen/Main.c#L23).
* A **second shellcode** is _dynamically generated_ using the [GenerateRandomVariant](https://github.com/Maldev-Academy/AlphabeticalPolyShellGen/blob/main/AlphabeticalPolyGen/PolyShellcodeGen.h#L298C6-L298C27) function. This shellcode is responsible for decoding and passing code execution to `g_AlphabeticalDecoder`, which decodes the Alphabetical shellcode and executes it, alongside performing necessary memory cleanup logic.

> [!NOTE]
> The logic behind the `g_AlphabeticalDecoder` shellcode is located in the [AlphabeticalShellcodeDecode.asm](https://github.com/Maldev-Academy/AlphabeticalPolyShellGen/blob/main/AlphabeticalShellcodeDecode.asm) file.
> 
> The logic behind the XOR decoder shellcode is located in the [XorShellcodeDecode.asm](https://github.com/Maldev-Academy/AlphabeticalPolyShellGen/blob/main/XorShellcodeDecode.asm) file.

## Usage:

* One can execute the [AlphabeticalPolyGen](https://github.com/Maldev-Academy/AlphabeticalPolyShellGen/tree/main/AlphabeticalPolyGen) program to generate a polymorphic shellcode variant of a specified shellcode:

```
AlphabeticalPolyGen.exe --i <Raw Shellcode File> --o <Output File Name>
```

* For testing, use the [LocalShellcodeExec.exe](https://github.com/Maldev-Academy/AlphabeticalPolyShellGen/tree/main/LocalShellcodeExec) program as follows:

```
LocalShellcodeExec.exe --i <Encoded Shellcode To Execute>
```

## Demo:

### 1. Building two variants of Metasploit's x64 calc.exe shellcode:

### 2. Examining these variants in a hex editor:

### 3. Utilizing [LocalShellcodeExec.exe](https://github.com/Maldev-Academy/AlphabeticalPolyShellGen/tree/main/LocalShellcodeExec) for testing:

AlphabeticalPolyShellGen

파일 탐색기

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

AlphabeticalPolyShellGen

파일 탐색기

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README