About OWASP-ZSC
OWASP ZSC is open source software written in python which lets you generate customized shellcodes and convert scripts to an obfuscated script. This software can be run on Windows/Linux/OSX with Python 2 or 3.
What is shellcode?: Shellcode is a small codes in Assembly language which could be used as the payload in software exploitation. Other usages are in malwares, bypassing antiviruses, obfuscated codes...
You can read more about OWASP-ZSC in these link:
- OWASP ZSC Tool Project - OWASP
- Document: OWASP ZSC · GitBook (Legacy)
- Home page: OWASP ZSC | OWASP ZCR Shellcoder
- Features: OWASP ZSC | OWASP ZCR Shellocder Available Features
- Archive: ZCR-Shellcoder-Archive
- Mailing List: Google Groups
- API: api.z3r0d4y.com
Another good reason for obfuscating files or generating shellcode with OWASP-ZSC is that it can be used during your pen-testing. Malicious hackers use these techniques to bypass anti-virus and load malicious files in systems they have hacked using customized shellcode generators. Anti-virus work with signatures in order to identify harmful files. When using very well known encoders such as
msfvenom
, files generated by this program might be already flagged by Anti-virus programs.Our purpose is not to provide a way to bypass anti-virus with malicious intentions, instead, we want to provide pen-testers a way to challenge the security provided by Anti-virus programs and Intrusion Detection systems during a pen test.In this way, they can verify the security just as a black-hat will do.
According to other shellcode generators same as Metasploit tools and etc, OWASP-ZSC using new encodes and methods which antiviruses won't detect. OWASP-ZSC encoders are able to generate shell codes with random encodes and that allows you to generate thousands of new dynamic shellcodes with the same job in just a second, that means, you will not get the same code if you use random encodes with same commands, And that make OWASP-ZSC one of the best! During the Google Summer of Code we are working on to generate Windows Shellcode and new obfuscation methods. We are working on the next version that will allow you to generate OSX.
OWASP-ZSC Installation:
You must install Metasploit and Python 2 or 3 first:
- For Debian-based distro users:
sudo apt install python2 python3 metasploit-framework
- For Arch Linux based distro users:
sudo pacman -S python2 python3 metasploit
- For Windows users: Download Python and Metasploit here.
sudo
):DISCLAIMER: THIS SOFTWARE WAS CREATED TO CHALLENGE ANTIVIRUS TECHNOLOGY, RESEARCH NEW ENCRYPTION METHODS, AND PROTECT SENSITIVE OPEN SOURCE FILES WHICH INCLUDE IMPORTANT DATA. CONTRIBUTORS AND OWASP FOUNDATION WILL NOT BE RESPONSIBLE FOR ANY ILLEGAL USAGE.
An example of OWASP-ZSC
Related posts
- Pentest Tools Subdomain
- Hacker Tools For Pc
- Hacking Tools Software
- Pentest Tools Download
- Hacking Tools For Games
- Pentest Tools Framework
- Pentest Tools Review
- Pentest Tools Online
- Hacker Techniques Tools And Incident Handling
- Hacking Tools For Windows Free Download
- Pentest Tools For Android
- Top Pentest Tools
- Hacker Tools Apk
- Hacking Tools For Pc
- Hacking Tools For Games
- Pentest Tools
- New Hack Tools
- Pentest Tools Find Subdomains
- Hack Tools
- Best Pentesting Tools 2018
- Hacker Tools Apk
- Install Pentest Tools Ubuntu
- Pentest Tools For Ubuntu
- Tools Used For Hacking
- Hacking Tools For Beginners
- Physical Pentest Tools
- Black Hat Hacker Tools
- Ethical Hacker Tools
- Hack Tool Apk No Root
- Hacking Tools Free Download
- Hacker Tools
- What Is Hacking Tools
- Growth Hacker Tools
- Hacking Tools Windows 10
- Hacker Tools Hardware
- Pentest Tools Framework
- Usb Pentest Tools
- Hacks And Tools
- Hacking Tools 2019
- Hacking Tools For Windows
- Physical Pentest Tools
- Pentest Box Tools Download
- Hacking Tools For Pc
- Hackrf Tools
- Hacker Tools
- Hacking Tools For Games
- Hack Tools For Ubuntu
- Hacking Apps
- Hackers Toolbox
- Hack App
- Hack App
- Hacker Security Tools
- Hack Tools Pc
- Easy Hack Tools
- Pentest Tools Port Scanner
- Hacker Tools Apk Download
- Hacking Tools Free Download
- Pentest Tools Download
- Hack Tools For Windows
- Hacking Tools Online
- Tools For Hacker
- Hack Tools Download
- Hacking Tools For Mac
- Pentest Box Tools Download
- Github Hacking Tools
- Pentest Tools Find Subdomains
- New Hacker Tools
- Pentest Tools Nmap
- Bluetooth Hacking Tools Kali
- Pentest Tools Tcp Port Scanner
- Pentest Tools Alternative
- Hacking App
- Computer Hacker
- Hack Tools For Windows
- Hack Tools For Windows
- Wifi Hacker Tools For Windows
- Easy Hack Tools
- Pentest Tools Website Vulnerability
- Pentest Tools Kali Linux
- Pentest Automation Tools
- Hacking Tools Windows
- Growth Hacker Tools
- Underground Hacker Sites
- Hacking Tools Windows
- Pentest Tools Port Scanner
- Hacking Tools 2020
- Hack Apps
- Hacker Tools Mac
- Termux Hacking Tools 2019
- Termux Hacking Tools 2019
- Ethical Hacker Tools
- Hacker Techniques Tools And Incident Handling
- Hacker Tools Github
- Pentest Tools Framework
- Hacking Tools Download
- Pentest Tools Framework
- Hacking Tools For Kali Linux
- Hacking Tools And Software
- Bluetooth Hacking Tools Kali
- Hacking Tools Software
- Pentest Tools Windows
- Hacker Techniques Tools And Incident Handling
- Pentest Tools Github
- Hacker Techniques Tools And Incident Handling
- What Is Hacking Tools
- Pentest Tools Github
- Hack And Tools
- Hacker Tools 2019
- Pentest Tools Website
- Pentest Tools Linux
- Hacker Tools 2020
- Hacker Tools Apk
- Hacking Tools Github
No hay comentarios:
Publicar un comentario