Blog
Articles, guides, and shellcode research.
Turn raw shellcode bytes back into assembly — decode hex and escape formats, disassemble with Capstone, and spot bad characters before you run it.
Annotated shellcode examples for Linux x86 and x64 — execve /bin/sh and reverse TCP — with the bytes, the disassembly, and the gotchas.
How Linux shellcode works — syscalls, registers, and position-independent code — and how to assemble, encode, and test it safely.
Compare ways to generate shellcode — msfvenom, hand-rolled assembly, and a browser-based generator — with the trade-offs and when to use each.
Shellcode explained: what it is, why exploits use it, how it is written and encoded, and how to generate and test it safely in your browser.
A migration path from team-server shellcode habits to in-browser generation without losing reproducibility or OPSEC discipline.
How null and alphanumeric presets map to real injection channels, and when you must build a custom bad-char list.
Using a hex view to catch alignment issues, obvious bad chars, and length mistakes before shellcode hits an exploit script.
How to document encoder chains, network parameters, and export formats so retests do not turn into archaeology.