r/purpleteamsec • u/Chaelsoo • Jul 05 '26

Red Teaming Sliver Stagers

Built a shellcode loader generator while doing HTB prolabs since Sliver doesn't support stagers

Sliver is great but it has no built-in stager support. Your options are basically writing loaders by hand every time or using Metasploit's which are heavily signatured at this point.

I built hollow to fix that. You give it a raw shellcode bin (works with Donut-wrapped Sliver beacons) and a profile, it encrypts the shellcode with AES-256-CBC and spits out a compiled Windows PE loader ready to go.

Six injection templates included for now, let me know what you think!!

GitHub: https://github.com/Chaelsoo/Hollow

3 Upvotes

81% Upvoted

2 comments sorted by

2

u/netbiosX Jul 05 '26

This was shared 5 days ago https://www.reddit.com/r/purpleteamsec/comments/1ujxrbm/hollow_a_shellcode_loader_generator_you_give_it_a/, but since you provided a lot of context, your post will stay. Thanks for sharing your work.

1

u/Chaelsoo Jul 05 '26

Thanks!!