Shellcode is a small machine-code payload injected and executed in a target process via a vulnerability. Classically spawns /bin/sh.
Written in x86/x64 assembly, typically null-byte free. Blocked by NX/DEP; effective when that mitigation is absent.