Skip to content
NewA calmer, faster ZeroHour
Toolsinfo

EvilVM: Forth shellcode

Lobsters · securityby web.archive.org via vinipsmaker ()1 min read3 · 3 reads
Read at web.archive.org
AI summary · grok-4.7Summaries by Vani AI

EvilVM is a 5-10KB position-independent Forth shellcode that provides a remote interactive shell.

EvilVM, presented at NolaCon 2019, is a native-code Forth compiler shipped as position-independent x86_64 shellcode of about 5-10KB. Operators deploy an agent and interact through a REPL over network streams such as TCP or HTTP, with direct memory access and a C foreign-function interface. Payload generation supports encoding and encapsulation aimed at exploit and injection delivery. Source is on GitHub, and the archived project site was last updated in May 2019.

Key facts
  • Agent is roughly 5-10KB of x86_64 position-independent shellcode.
  • Interactive Forth REPL communicates over TCP or HTTP streams.
  • Runtime offers direct memory access and a C FFI.
  • Alpha release was presented at NolaCon 2019.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
Tags
evilvmshellcodeforthremote-code-executionx86-64red-teampayload
Products
EvilVM

From the original article

1 min read at web.archive.org

I presented EvilVM’s Alpha release at NolaCon , 2019. You can see Irongeek ’s video recording on YouTube, for a good intro to the project and some demos: Download slides from NolaCon 2019 talk libreoffice ODP format , PDF format . Find the code for EvilVM at https://github.

Lobsters · security

By web.archive.org via vinipsmaker · web.archive.org

Read the full article at Lobsters · security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.