cyber-capstone-shellcode

What problem does it solve?

Shellcode forensic analysis via Capstone disassembly. Model fills raw hex-encoded shellcode payloads (bind shell, exec calc) that must disassemble into valid x86-64 instructions with MITRE ATT&CK classifications.

Core Features & Use Cases

• Capstone-based validation: verify that provided hex payloads disassemble into meaningful instructions.
• MITRE classification mapping: ensure each payload is labeled with the correct ATT&CK technique and platform.
• Use Case: security researchers test and validate shellcode payloads (reverse/TCP, bind, calc) in controlled workflows.

Quick Start

Place hex payload blocks in the payloads.hex file and run the analyzer to verify disassembly and MITRE mappings.