About OWASP-ZSC
OWASP ZSC is open source software written in python which lets you generate customized shellcodes and convert scripts to an obfuscated script. This software can be run on Windows/Linux/OSX with Python 2 or 3.
What is shellcode?: Shellcode is a small codes in Assembly language which could be used as the payload in software exploitation. Other usages are in malwares, bypassing antiviruses, obfuscated codes...
You can read more about OWASP-ZSC in these link:
- OWASP ZSC Tool Project - OWASP
- Document: OWASP ZSC · GitBook (Legacy)
- Home page: OWASP ZSC | OWASP ZCR Shellcoder
- Features: OWASP ZSC | OWASP ZCR Shellocder Available Features
- Archive: ZCR-Shellcoder-Archive
- Mailing List: Google Groups
- API: api.z3r0d4y.com
Another good reason for obfuscating files or generating shellcode with OWASP-ZSC is that it can be used during your pen-testing. Malicious hackers use these techniques to bypass anti-virus and load malicious files in systems they have hacked using customized shellcode generators. Anti-virus work with signatures in order to identify harmful files. When using very well known encoders such as
msfvenom
, files generated by this program might be already flagged by Anti-virus programs.Our purpose is not to provide a way to bypass anti-virus with malicious intentions, instead, we want to provide pen-testers a way to challenge the security provided by Anti-virus programs and Intrusion Detection systems during a pen test.In this way, they can verify the security just as a black-hat will do.
According to other shellcode generators same as Metasploit tools and etc, OWASP-ZSC using new encodes and methods which antiviruses won't detect. OWASP-ZSC encoders are able to generate shell codes with random encodes and that allows you to generate thousands of new dynamic shellcodes with the same job in just a second, that means, you will not get the same code if you use random encodes with same commands, And that make OWASP-ZSC one of the best! During the Google Summer of Code we are working on to generate Windows Shellcode and new obfuscation methods. We are working on the next version that will allow you to generate OSX.
OWASP-ZSC Installation:
You must install Metasploit and Python 2 or 3 first:
- For Debian-based distro users:
sudo apt install python2 python3 metasploit-framework
- For Arch Linux based distro users:
sudo pacman -S python2 python3 metasploit
- For Windows users: Download Python and Metasploit here.
sudo
):DISCLAIMER: THIS SOFTWARE WAS CREATED TO CHALLENGE ANTIVIRUS TECHNOLOGY, RESEARCH NEW ENCRYPTION METHODS, AND PROTECT SENSITIVE OPEN SOURCE FILES WHICH INCLUDE IMPORTANT DATA. CONTRIBUTORS AND OWASP FOUNDATION WILL NOT BE RESPONSIBLE FOR ANY ILLEGAL USAGE.
An example of OWASP-ZSC
Read more
- Android Hack Tools Github
- Pentest Tools Download
- Hack And Tools
- Hack Tools For Windows
- Pentest Tools Free
- Hacking Tools For Windows
- Best Hacking Tools 2019
- Hacker Tools For Mac
- How To Hack
- Install Pentest Tools Ubuntu
- Hacker Tools Mac
- Ethical Hacker Tools
- Nsa Hacker Tools
- What Are Hacking Tools
- Best Pentesting Tools 2018
- Hacker Tools For Mac
- Computer Hacker
- Pentest Tools Find Subdomains
- Pentest Tools Review
- Hacker
- Hacker Tools
- Hacker Tools Hardware
- Hacking Tools For Games
- Bluetooth Hacking Tools Kali
- Nsa Hack Tools
- Ethical Hacker Tools
- Hacking Tools For Games
- Hacking Tools Pc
- Pentest Tools Review
- Best Hacking Tools 2019
- Github Hacking Tools
- Hacker Tools Windows
- Hack Tools For Games
- Underground Hacker Sites
- Hacker Security Tools
- Pentest Tools Website
- Hack Tools For Windows
- Hacking Tools Kit
- What Are Hacking Tools
- Pentest Tools Tcp Port Scanner
- Black Hat Hacker Tools
- Hacker Tools 2020
- Hacking App
- Hacking Tools For Mac
- Hacker Tools 2019
- Best Hacking Tools 2020
- Hacking Tools Hardware
- Hacker Tools For Ios
- Hacker
- Hacker Tools Software
- Hack Tools Download
- Pentest Tools For Android
- Hacking Tools And Software
- Pentest Tools Website Vulnerability
- Hacking Tools Software
- Pentest Tools Subdomain
- Hacker Tools
- Pentest Tools Online
- Hacker Tool Kit
- Hacking App
- Pentest Tools Linux
- Hacker Tools For Mac
- Growth Hacker Tools
- Hack Tools For Mac
- Hack Tools For Windows
- Pentest Tools Android
- Hack App
- Pentest Tools
- Pentest Tools For Ubuntu
- Hacking Tools For Windows Free Download
- Hack Tool Apk No Root
- Pentest Tools Website Vulnerability
- Free Pentest Tools For Windows
- Hacker Hardware Tools
- Hack Tools For Games
- Hack Tools Pc
- Hacking Tools For Pc
- Hacking Tools Free Download
- Hacking Tools Pc
- Pentest Tools For Android
- Install Pentest Tools Ubuntu
- Hack Tools For Ubuntu
- What Are Hacking Tools
- Pentest Tools Website
- Hack Apps
- World No 1 Hacker Software
- Pentest Recon Tools
- Github Hacking Tools
- Hacker Tool Kit
- Pentest Tools List
- Beginner Hacker Tools
- Hacking Tools Pc
- Hacking Tools Mac
- Hacking Tools For Kali Linux
- Black Hat Hacker Tools
- Hack Tools For Pc
- Hacking Tools Online
- Pentest Tools Subdomain
- Hack App
- Hack Tools Pc
- Hack Tools Mac
- Pentest Tools Windows
- Hack Tools Github
- Kik Hack Tools
- Underground Hacker Sites
- Hacking Tools Name
- Hack Tools Pc
- Hacking Tools Software
- Hacking Tools And Software
- Github Hacking Tools
- Hacking Apps
- Hack Tools For Ubuntu
- Hack Tools
- Hacks And Tools
- Termux Hacking Tools 2019
- Pentest Tools Apk
- Black Hat Hacker Tools
- Hacking Tools Online
- Nsa Hack Tools Download
- Github Hacking Tools
- Hacker Tools Apk
- New Hacker Tools
- Hacker Tools Linux
- Pentest Tools For Android
- Black Hat Hacker Tools
No comments:
Post a Comment