Framework for creating environmental keyed payloads that only execute on specific target systems.
Ebowla is a framework for creating environmental keyed payloads used in penetration testing and red team operations. It generates malicious executables that only activate when specific environmental conditions on the target system are detected, helping security professionals test detection capabilities and evasion techniques. The framework supports multiple payload types including EXEs, DLLs, shellcode, and scripts across different programming languages.
Security researchers, penetration testers, and red team operators who need to create targeted payloads for security assessments and evasion testing.
Ebowla provides a specialized framework for environmental keying that's not commonly available in general-purpose penetration testing tools, offering precise control over payload activation conditions and supporting multiple execution methods for comprehensive testing scenarios.
Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Payloads only activate under specific system conditions, enhancing stealth and evasion, as core to the project's philosophy for targeted execution.
Generates payloads for Windows, Linux, and macOS with multiple types like EXE, DLL, and shellcode, shown in the payload support table for flexible testing.
Many payload variants execute entirely in memory without disk writes, improving evasion, as documented in the payload support for reflective DLLs and shellcode.
Outputs payloads in Python, Go, and PowerShell, allowing adaptation to different environments, based on the payload support matrix in the README.
The project is marked 'NO LONGER SUPPORTED' with known issues like Go version lock-in, making it risky for modern use without community updates.
Specific payload types have problems, such as MSF x86 EXE incompatibility with MemoryModule and PowerShell only tested on v5, per the known issues section.
Features like File Drop in Go are listed as 'In Progress' in the payload table, indicating missing or unstable functionality for some use cases.