shellter

Name: shellter
Availability: InStock
Author: Dave

Inject custom shellcode into Windows PE executables to evade antivirus detection.

15|1|Updated Feb 12, 2026

Search Tags:#injection #windows #backdoor #shellcode #pe file #av evasion

Ready to run

npx skills add https://github.com/AeonDave/malskill --skill shellter

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: shellter
Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/evasion/shellter
Command: npx skills add https://github.com/AeonDave/malskill --skill shellter

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps in creating backdoored executable files by injecting custom shellcode into legitimate Windows PE executables, thereby evading antivirus detection.

Core Features & Use Cases

Dynamic Shellcode Injection: Injects shellcode into native Windows PE executables.
Preserves Functionality: Ensures the original functionality of the PE file remains intact after injection.
AV Evasion: Designed to bypass antivirus detection through its dynamic injection method.
Use Case: Trojanizing legitimate executables like putty.exe or vlc.exe with custom shellcode for initial access in a red team engagement.

Quick Start

Use Shellter to automatically backdoor the 'putty.exe' file with a Windows meterpreter reverse TCP payload, listening on IP 10.0.0.1 and port 4444.

Frequently Asked Questions about shellter

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I inject shellcode into a Windows PE executable to create a backdoor?▼

To inject shellcode into a Windows PE executable, you can use Shellter to dynamically insert custom payloads into native files. This process trojanizes the executable while preserving its original functionality for stealthy access.

What is the best way to backdoor a PE file while evading antivirus detection?▼

The best way to backdoor a PE file while evading antivirus detection is through dynamic shellcode injection. This method modifies the executable dynamically, helping the backdoored file bypass standard AV checks during red team engagements.

Can I use Metasploit payloads to backdoor a PE executable?▼

Yes, you can use Metasploit payloads to backdoor a PE executable. Shellter optionally integrates with Metasploit to generate shellcode, such as a Windows meterpreter reverse TCP payload, for injection into the target file.

Does injecting shellcode into a PE file break the original program functionality?▼

Injecting shellcode into a PE file does not break the original program functionality. The dynamic injection process is designed to preserve the legitimate operations of the executable, ensuring the trojanized file runs normally for the end user.

Do I need the Shellter executable to backdoor Windows PE files?▼

Yes, you need the Shellter executable to backdoor Windows PE files. It is the required tool for performing the dynamic shellcode injection and modifying native executables for initial access.

Why use dynamic shellcode injection over other methods for trojanizing executables?▼

Dynamic shellcode injection is used over other methods because it specifically targets AV evasion by dynamically modifying the PE file. This approach ensures the payload blends into the legitimate executable, maintaining stealth for initial access operations.