uuid-loader

KO | EN

gitlite — search

#typescript #ai-agents #ai #dsh-plugin #deepseek-harness #open-source #claude-code #codex #cli #developer-tools #react #windows

★ 86 Open GitHub ↗

UUID based Shellcode loader for your favorite C2

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# UUID Loader

Experimental Stage-1 Shellcode Loader, using IE COM Object Methods to fetch Shellcode and uses UUID as shellcode.

# Features

- Fetches Cobalt Shellcode from Github using IE-Com 
- Shellcode returns is bunch of UUID Strings
- Uses UuidFromStringA callback to load shellcode into allocated heap area
- Dynamic API Resolving to make IAT Look clean
- Multiple Preliminary Checks before execution
- Implements BlockDLL;s to block non microsoft signed DLL to get loader - Blocking EDR DLL Hooks
- Does Local Process Injection, avoiding touching remote process 
- Works fine with Cobalt Strike x64 Stageless Shellcode

# Upcoming

- Obfuscated UUIDs and deobfuscate before triggering callback
- Ability to convert UUID to shellcode and inject remote using thread hijacking
- Using SGN or custom shellcode encoder before generating UUID Shellcode
 
 # Usage
 
 - Host your shellcode as UUIDs 
 - Hardcode the raw link in Line: 206 inside downloader.h

# Idea

https://research.nccgroup.com/2021/01/23/rift-analysing-a-lazarus-shellcode-execution-method/

Credits to [slaeryan](https://twitter.com/slaeryan) for IE COM code from [Wraith](https://github.com/slaeryan/AQUARMOURY/tree/master/Wraith)

uuid-loader

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README