Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
MassDriver — Proxies sensitive API calls from shellcode to artifacts for CET-compatible clean call stacks, enabling stealthy payload execution and call stack spoofing. | Kitploit
Tools/GitHubGitHub/sizeable-bingus/massdriver
ExploitationPost-ExploitationBinary AnalysisRed TeamingPayload Development
GitHubsizeable-bingus/massdriver

MassDriver

Proxies sensitive API calls from shellcode to artifacts for CET-compatible clean call stacks, enabling stealthy payload execution and call stack spoofing.

View Repository
3133 months agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

MassDriver

Proxying sensitive API calls from shellcode to artifact for CET compatible clean call stacks.

Companion PoC for my blog post: Stop Being Weird — Life After Call Stack Spoofing Under CET.

Building

MinGW does not have a way to set the CET compatibility flag so you will need llvm-mingw to build with CET.

Builds with ./payload/testDll.c as its payload by default, which calls LoadLibraryA and Sleep so you can inspect the call stack.

  • Place your copy of libtcg.x64.zip in ./tcg/
  • Place your Crystal Palace dist/ directory into ./tcg/dist
  • make poc

Cobalt Strike

  • Load rawDll.cna and generate payload with Payloads->Stageless Payload Generator
  • Output to ./bin/payload.dll
  • make cs
Download Tool