SecurityXploded Blog

Released ShellDetect v1.0 – New Shell Code Detection Tool

Shell Detect is the FREE tool to detect presence of Shell Code within a file or network stream. You can either provide raw binary file (such as generated from Metasploit) or network stream file as input to this tool.

.

.

These days attackers distribute malicious files which contains hidden exploit shell code. On opening such files, exploit shell code get executed silently, leading to complete compromise of your system . This is more dangerous when the exploit is ‘Zero Day’ as it will not be detected by traditional signature based Anti-virus solutions. In such cases ShellDetect may help you to identify presence of shell code (as long as it is in raw format) and help you to keep your system safe.

.
We recommend running this tool in Virtual Environment (using VMWare, VirtualBox) as it may cause security issues on your system if the input file is malicious.

.

ShellDetect tool is developed by Amit Malik – one of our active member.  You can see all his tools and articles here.

This tool is still in experimentation phase and currently works on Windows XP only.

For more interesting details, check out Shell Detect v1.0

Leave a Reply