The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: Provides a functional Python script that assembles and executes x64 shellcode for a reverse shell.
[COMMAND_EXECUTION]: The shellcode payload is designed to execute 'cmd.exe' on the target system upon successful connection.
[DATA_EXFILTRATION]: The provided shellcode contains a hardcoded private IP address (172.31.6.49) used to establish a reverse connection.
[OBFUSCATION]: Discusses and provides implementation details for techniques such as XOR/AES encryption, junk code insertion, and chunked memory writes to evade detection.
[PRIVILEGE_ESCALATION]: Details methods for process injection and thread hijacking, including bypassing Pointer Authentication (PAC) on ARM64.
[PERSISTENCE]: Explains techniques for backdooring signed PE binaries and creating malicious macOS launch agents to maintain access.
[DYNAMIC_EXECUTION]: Demonstrates the use of 'ctypes' in Python to allocate executable memory and spawn threads for running dynamically generated assembly.
[EXTERNAL_DOWNLOADS]: Contains references to multiple external repositories and tools intended for offensive security and malware creation.

offensive-shellcode