About OWASP-ZSC
OWASP ZSC is open source software written in python which lets you generate customized shellcodes and convert scripts to an obfuscated script. This software can be run on Windows/Linux/OSX with Python 2 or 3.
What is shellcode?: Shellcode is a small codes in Assembly language which could be used as the payload in software exploitation. Other usages are in malwares, bypassing antiviruses, obfuscated codes...
You can read more about OWASP-ZSC in these link:
- OWASP ZSC Tool Project - OWASP
- Document: OWASP ZSC · GitBook (Legacy)
- Home page: OWASP ZSC | OWASP ZCR Shellcoder
- Features: OWASP ZSC | OWASP ZCR Shellocder Available Features
- Archive: ZCR-Shellcoder-Archive
- Mailing List: Google Groups
- API: api.z3r0d4y.com
Another good reason for obfuscating files or generating shellcode with OWASP-ZSC is that it can be used during your pen-testing. Malicious hackers use these techniques to bypass anti-virus and load malicious files in systems they have hacked using customized shellcode generators. Anti-virus work with signatures in order to identify harmful files. When using very well known encoders such as
msfvenom
, files generated by this program might be already flagged by Anti-virus programs.Our purpose is not to provide a way to bypass anti-virus with malicious intentions, instead, we want to provide pen-testers a way to challenge the security provided by Anti-virus programs and Intrusion Detection systems during a pen test.In this way, they can verify the security just as a black-hat will do.
According to other shellcode generators same as Metasploit tools and etc, OWASP-ZSC using new encodes and methods which antiviruses won't detect. OWASP-ZSC encoders are able to generate shell codes with random encodes and that allows you to generate thousands of new dynamic shellcodes with the same job in just a second, that means, you will not get the same code if you use random encodes with same commands, And that make OWASP-ZSC one of the best! During the Google Summer of Code we are working on to generate Windows Shellcode and new obfuscation methods. We are working on the next version that will allow you to generate OSX.
OWASP-ZSC Installation:
You must install Metasploit and Python 2 or 3 first:
- For Debian-based distro users:
sudo apt install python2 python3 metasploit-framework
- For Arch Linux based distro users:
sudo pacman -S python2 python3 metasploit
- For Windows users: Download Python and Metasploit here.
sudo
):DISCLAIMER: THIS SOFTWARE WAS CREATED TO CHALLENGE ANTIVIRUS TECHNOLOGY, RESEARCH NEW ENCRYPTION METHODS, AND PROTECT SENSITIVE OPEN SOURCE FILES WHICH INCLUDE IMPORTANT DATA. CONTRIBUTORS AND OWASP FOUNDATION WILL NOT BE RESPONSIBLE FOR ANY ILLEGAL USAGE.
An example of OWASP-ZSC
More info
- Hacking Tools Windows
- Hacking Apps
- Pentest Tools Online
- Hak5 Tools
- Hacking Tools For Windows Free Download
- Hack Tools For Games
- Pentest Tools List
- Hacker Tools Apk Download
- Free Pentest Tools For Windows
- Nsa Hack Tools Download
- Black Hat Hacker Tools
- How To Hack
- Hacker Tools Windows
- Pentest Tools Android
- Game Hacking
- Hacking Tools Kit
- Hacker Tools Github
- Pentest Tools Alternative
- Blackhat Hacker Tools
- Hackers Toolbox
- Pentest Tools Kali Linux
- Hack App
- Hack Tools 2019
- Free Pentest Tools For Windows
- Best Pentesting Tools 2018
- Android Hack Tools Github
- Pentest Tools Website
- Hack Tools For Ubuntu
- Pentest Tools For Mac
- Hacking Tools Software
- Pentest Tools Port Scanner
- Hacking Tools For Mac
- New Hack Tools
- Hack App
- Pentest Tools Subdomain
- Hacker Tool Kit
- Hacking Tools 2020
- Hacking Tools Windows
- Pentest Tools Linux
- Hackrf Tools
- Hacker Tools List
- Hacker Hardware Tools
- Pentest Tools Website Vulnerability
- Hacking Tools 2019
- Hacker Tool Kit
- Underground Hacker Sites
- Hacking Tools Kit
- Hacking Tools For Windows 7
- Hackers Toolbox
- Hack App
- Pentest Tools Website Vulnerability
- Pentest Tools Bluekeep
- Hacker Tools Hardware
- Hack App
- Pentest Tools Tcp Port Scanner
- Pentest Tools Website
- Hack Tools For Ubuntu
- Hak5 Tools
- Hacker Tools Linux
- Wifi Hacker Tools For Windows
- Wifi Hacker Tools For Windows
- Hacker
- Pentest Tools Free
- Pentest Tools Website Vulnerability
- Hacker Tools Linux
- Hacker Tools Linux
- Tools For Hacker
- Hacker Tools Apk
- Termux Hacking Tools 2019
- Pentest Tools Port Scanner
- Pentest Tools Open Source
- Pentest Tools For Mac
- Hacking Tools Name
- Best Pentesting Tools 2018
- Hacker Tools Hardware
- Pentest Tools Url Fuzzer
- Hack Tools For Windows
- Hacker Tools Hardware
- Tools For Hacker
- Pentest Tools Port Scanner
- Hack Tools For Windows
- Pentest Tools For Windows
- Hacking Tools Kit
- Black Hat Hacker Tools
- Hack Apps
- Hacker Techniques Tools And Incident Handling
- Hacker Search Tools
- Pentest Box Tools Download
- Tools For Hacker
- Hacking Tools 2020
- Hacks And Tools
- Hacking Tools Free Download
- Hacking Apps
- Pentest Tools Review
- Pentest Tools Windows
- Hacker Tools
- Pentest Tools Port Scanner
- Pentest Tools For Ubuntu
- Hacker Tools Mac
- Hacker Tools
- Hacking Tools For Windows
- Pentest Tools Nmap
- Pentest Tools Nmap
- Hacking Tools And Software
- Pentest Reporting Tools
- Hacker Tools Mac
- Underground Hacker Sites
- Pentest Tools Open Source
- Pentest Tools Bluekeep
- Hacker Tools 2020
- Github Hacking Tools
No comments:
Post a Comment