Skip to content
Get packs

Offensive Shellcode Reference

Guides an agent through writing, packaging and evading detection for Windows/Linux shellcode payloads

Source Download skill
Repository
SnailSploit/Claude-Red
Stars
10,230
Licence
MIT
Files
1 file

What it does

This skill gives an AI agent a detailed reference for developing shellcode, which is small raw machine code used in offensive security work. Once installed, the agent can explain position-independent code, Windows API resolution via PEB walking, shellcode loader design, PE-to-shellcode conversion with tools like Donut and sRDI, and many techniques for avoiding antivirus and EDR detection. It is written for penetration testers and red teamers working on authorised engagements.

Great for

  • Red team operators and penetration testers preparing authorised engagements
  • Security researchers studying how EDR and AV detect injection and loaders
  • Security students learning low-level Windows internals and PE structure

Skip it if

  • Anyone without authorisation to test the target systems; the content is directly aimed at evading security controls and could enable real attacks
  • Beginners wanting general coding help, since the material assumes assembly and Windows internals knowledge
  • Defenders looking for detection guidance; the skill focuses on evasion rather than detecting it

Try asking

  • “Explain how to resolve kernel32.dll functions via PEB traversal for position-independent shellcode”
  • “Compare process injection techniques like NtQueueApcThreadEx and ThreadlessInject and their detection risk”
  • “Describe how to convert a DLL into position-independent shellcode with sRDI”
  • “Outline a progressive evasion plan for a loader used in an authorised red team exercise”
Step-by-step guide: how to use Offensive Shellcode ReferenceInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the MIT licence and an attribution note.

    offensive-shellcode.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip offensive-shellcode.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip offensive-shellcode.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Use only within a documented, authorised engagement and state the scope and rules of engagement in your prompt
  • Ask for explanations of a specific technique rather than a complete end-to-end payload, and verify tool links and versions yourself since the reference is a snapshot
  • Pair with a lab environment and test outputs in isolated VMs, not on production or third-party systems

What's inside

  • SKILL.md

Redistributed unmodified from SnailSploit/Claude-Red under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.