> ## Documentation Index
> Fetch the complete documentation index at: https://witchking.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Overview

> Bash script that generates shellcode runners in multiple formats.

**Apophis** is a Bash script that leverages tools such as `DotNetToJScript`, `ConfuserEx`, `Net-Obfuscator`, and **Mono .Net Framework** to generate shellcode runners in various formats from C# templates.

> [!NOTE]
>
> [GitHub Repository](https://github.com/tasox/Apophis)

## Generated Shellcode Runner Formats

| Format | Description |
| - | - |
| XOR | `.exe`, `.dll` |
| Caesar | `.exe`, `.dll` |
| AMSI Bypass | Patching, Unhooking |
| TripleDES | `.exe` |
| ASPX / Web.Config | Web-based delivery |
| HTA / JS / XSL | Script-based execution |
| MSI | Installer-based delivery |
| InstallUtil | AppLocker bypass |
| AES + Compression | `.exe` with compression |

## Payload Naming Prefixes

| Prefix | Meaning |
| - | - |
| `_embedded` | Shellcode is embedded inside the runner |
| `_marshal` | Payload injected into executable's own memory space |
| `_numa` | `VirtualAllocExNuma` used instead of `VirtualAllocEx` |
| `_FlsAlloc` | `FlsAlloc` API was used |


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.