Shellcodes database for study cases

Description

Although these kinds of shellcode presented on this page are rarely used for real exploitations, this page lists some of them for study cases and proposes an API to search specific ones. To learn modern exploitation, checkout how to the Return Oriented Programming works.

 

API

This is very straightforward to communicate with this API. Just send a simple GET method. The "s" argument contains your keyword.

http://shell-storm.org/api/?s=<keyword>

Use "*" for multiple keywords search.

/?s=<keyword1>*<keyword2>*<keyword3>

The output should be like this:

<auteur 1>::::<plateforme 1>::::<shellcode title 1>::::<shellcode id 1>::::<shellcode url 1>
<auteur 2>::::<plateforme 2>::::<shellcode title 2>::::<shellcode id 2>::::<shellcode url 2>
<auteur 3>::::<plateforme 3>::::<shellcode title 3>::::<shellcode id 3>::::<shellcode url 3>

For more information about how can you use it, read this shell-storm API python script. You can also find this API utilization in the Peda GDB project (shellcode command).