Skip to content

Shellcode Agent for Windows

jm33-m0 edited this page Feb 16, 2025 · 5 revisions

Generating emp3r0r Agent in Shellcode Form

emp3r0r supports generating its agent in shellcode format using the Donut framework. Follow these steps:

Setup

Prepare your environment by configuring the agent build options as you would for a regular agent.

Generate Shellcode

  • Run generate command.
  • Set payload_type to windows_executable.
  • Adjust any required configurable options.
  • Execute the run command.

Output

After running the above, you'll find a file with a .bin suffix in your output directory ~/.emp3r0r.

  • This file contains the compressed raw shellcode for the emp3r0r agent.

Custom Shellcode Loader

Users need to write their own shellcode loaders to:

  • Download the agent shellcode.
  • Execute the shellcode in memory.

Usage

Integrate the shellcode into your custom loader to suit your operational needs.

Clone this wiki locally