knownsec/shellcodeloader

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1747 stars · 379 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Windows shellcode loader generator written in C++ that packages raw shellcode into encrypted executables with multiple loading techniques designed to bypass antivirus detection. It includes a GUI generator and extensible loader templates supporting 13 loading modes for x86 and 12 for x64.

Use cases

• generate encrypted shellcode loaders for windows
• bypass antivirus detection in red team engagements
• test endpoint detection against shellcode loading techniques
• create loaders with different shellcode execution methods
• add autostart persistence to shellcode payloads
• develop custom shellcode loading templates

When to choose

• you need a GUI tool to quickly produce AV-evading shellcode loaders on Windows
• you want multiple loading techniques selectable from one generator
• you need extensible loader templates you can develop yourself in C++

When to avoid

• you need a cross-platform or Linux/macOS payload tool
• you want a maintained project with an active release cadence (last release 2020, no license)
• you need a legitimate, audited tool for production environments

Facets

application · maturity maintenance

security penetration-testing cryptography security penetration-testing windows windows cpp shellcode loader av-evasion red-team offensive-security malware-generation generator

Member repositories

For agents

markdown · JSON · MCP: product_card(name="knownsec/shellcodeloader")