Experimental Windows x86_64 shellcode generator from a freestanding C source file
Sh3llc0d1z0r is a proof-of-concept Python utility that compiles a Windows C payload into a raw binary blob and generates a small Windows loader for controlled laboratory testing.
The project demonstrates concepts commonly encountered in:
- Windows shellcode research
- PE export resolution
- Position-independent code
- Dynamic API discovery
- Raw binary extraction
- In-memory execution
- Basic payload transformation
- Reverse-connection behavior
This project can generate code capable of:
- Establishing an outbound network connection
- Spawning a command interpreter
- Executing code directly from allocated memory
- Applying a basic XOR transformation to payload bytes
Use this software only on systems that you own or are explicitly authorized to test.
The authors are not responsible for misuse, damage, data loss, unauthorized access, or legal consequences.
The included C payload is designed as a research example of position-independent Windows code. It demonstrates:
- Accessing the Process Environment Block
- Traversing loaded modules
- Resolving exported functions manually
- Loading Winsock dynamically
- Creating a TCP connection
- Redirecting standard handles
- Starting a command interpreter
The payload intentionally avoids relying on the normal import-resolution path used by conventional executables.
The project is intended for a Debian-based research environment with a MinGW-w64 toolchain installed. Required tools include:
- Python 3
- x86_64-w64-mingw32-gcc-win32
- GNU ld
- MinGW-w64 development packages
This project was developed with reference to the following repositories and technical resources:
c-to-shellcode — Techniques for compiling C code into shellcode.
c-reverse-shell — Windows reverse-shell implementation in C.
Windows_x64_Tcp_Reverse_Shell_Shellcode — Windows x64 TCP reverse-shell shellcode research.
These projects are referenced for educational and research purposes. Their respective authors and licenses remain applicable.