A small piece of code used as the payload in the exploitationof a software vulnerability. It is called "shellcode" because it typically starts a command shell from which the attacker can control the compromised machine
https://en.m.wikipedia.org/wiki/Shellcode