Trust Center
Verifiable trust, not marketing claims
shellcodes is designed so sensitive work stays in your browser after the app loads. This page documents what runs locally and what does not.
Local execution
Generation, encoding, and analysis use the WASM core in your browser.
Storage model
Saved collections live in IndexedDB on your device. Nothing is uploaded.
Responsible use
Authorized security testing, research, and education only.
Verification matrix
| Capability | Implementation | Status |
|---|---|---|
| Shellcode generation | Local WASM | Verified |
| Format conversion | Local WASM | Verified |
| Collections storage | IndexedDB (browser) | Verified |
| Server-side processing | None | Not applicable |
| Telemetry / analytics | None by default | Verified |
Operational limits
- You are responsible for lawful, authorized use on systems you own or control.
- Output quality depends on target environment; verify in your lab.
- Clear browser storage to remove saved collections.