hasherezade/pe_to_shellcode

Health v2 · maintenance only

Adoption not part of the score

2793 stars · 470 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

A C++ command-line tool that converts Windows PE executables into shellcode-compatible form, adding a reflective loading stub post-compilation so the output can be injected like raw shellcode while remaining a valid PE. It supports both 32-bit and 64-bit PEs and handles relocations, imports, and TLS callbacks.

Use cases

• convert a PE executable into shellcode for injection
• add a reflective loading stub to an already-compiled DLL or EXE
• test how a PE behaves when executed as shellcode
• prepare payloads for red-team injection techniques
• analyze PE loading behavior in malware research

When to choose

• you need to inject a compiled PE as if it were raw shellcode
• you want a reflective loader added post-compilation without modifying source
• you work in malware analysis or offensive security research on Windows binaries

When to avoid

• your PE relies on exception handling, delay-load imports, or MUI resources
• you need a general-purpose packer or obfuscation tool
• you target non-Windows executable formats like ELF or Mach-O

Facets

cli-tool · maturity active

security reverse-engineering developer-tools security penetration-testing reverse-engineering developer-tools windows cross-platform cpp shellcode pe-files malware-analysis red-team binary-conversion reflective-loading

Member repositories

For agents

markdown · JSON · MCP: product_card(name="hasherezade/pe_to_shellcode")