A shellcode loader powered by a web panel.

Informations:

• Made with vs2022 and cpp20 and caffeine.
• This project is just a proof of concept.
• Contact : fe.ll (discord)

Features:

• Web Panel

  • Payload manager
  • Automated encryption
  • Admin Panel
  • Register with invite
  • Accounts use tokens for login
  • Tokens hashed with argon2

• App

  • Early Bird Injection
  • Rc4 encryption
  • Anti Debugger
  • Anti VM
  • Compile time API Hashing
  • Direct syscall via Hell's Gate
  • Remote retrieval
  • Process blacklist
  • Self deletion

Only the main features are listed here.

Todo:

• Better Anti VM
• Better CreateProcess (NtCreatePRocess, ppid spoofing)
• Make the app more customisable
• Better builder

Web Panel Installation

• PHP 8.0
• Change db info in helper/db.php
• Import db.sql file
• Default login : pandore
• Change default login in admin panel.

App Installation

• Compile the loader
• Put pandore_app.exe in files\pandore_app.exe

Demo :

create.payload.demo.mp4

Pictures:

Disclaimer:

Pandore is intended to be used for educational purposes only and I am not responsible for any actions taken with any Pandore software.

Copyright Disclaimer under section 107 of the Copyright Act 1976, allowance is made for “fair use” for purposes such as criticism, comment, news reporting, teaching, scholarship, education and research.