short / Mischief-DLL-Stager

Reasonably undetected shellcode stager and executer.

Mischief-DLL-Stager

Moderately stealthy shellcode stager.

                                    ******,,,******                             
                               .***    ......      .**,                         
                             **,   ...........         **                       
                           **  ,.............            **                     
                         **  (...............           . .**                   
,                      ,*, *(..................          (  **             .    
       ***********,,,,**  (*................              *  **              **,
    .******,      .,***  (,............                    *  *********.        
   ******           **  (,....(...                          ( .*. .******       
******.            *,  (/..(,..                              , **    *******,   
****              ,*. /(/(..                                 ( .*.      ********
**,               **  ((..                                   (  *,        ******
**              ,*,  (/..                                    .  **        .*****
       .       ,*.  (..       .@&...                         (/ ,*. .      *****
      *       .*.  (..         ..&@@@&.         .....#@.      (  ,*  *          
    *         **  (..             ....        .@@@@@%.         (  **  **        
   *.        ,*  /(..                                          (  ,*    ,*      
   *         **  ((..       *                                   ,  **    ,      
  .          **  /(..       .*                       .,        .   **    .      
        ,*****,   /(..        *                     *          (  ,*            
   ***,     /((...   (,.       .                  *.         /(  ,***.          
**.    (((...........    *                                 (,  ,,     ,***  ****
   (((,.................                               .    .......((/    ,*****
(((........................ ..                          ..............,((*   .**
*............................... ..               ........................((/   
........................................       .............................((( 
....... ... .............  ................. .............. ................../(
......... .  ..............     ........................ ......................(
..........   ..................  .................... ................  ........
...........   .......................................................   ........
............    ....................................................   .........

This is a very simple shellcode stager that as of right now moderately undetected. I chose to legitimately load functions and then dynamically load others to be less immedialtely suspicious.

Instrutions

1. Simply generate your own shellcode using msfvenom, donut, powershellempire etc.
2. Insert your routable ip within the cpp file . You can also change the function name exported too optionally.
3. Compile the DLL
4. Server your shellcode on your webserver
5. rundll32.exe stager.dll,update

Detections as of 04/2023