EvilVM is a Forth-based position-independent shellcode project designed for remote code execution in information security contexts. Presented at NolaCon 2019, it deploys a lightweight (~5-10KB) x86_64 agent that provides interactive shell access, network-capable I/O streams, and native C interoperability via FFI for importing DLLs and wrapping exports.
Background
EvilVM was introduced at NolaCon 2019 as a tool for security researchers to deploy remote agents on target systems. It builds on Forth's minimalist, stack-based architecture to create compact shellcode with powerful runtime capabilities.
- Source
- Lobsters
- Published
- Sep 22, 2026 at 10:10 PM
- Score
- 5.0 / 10