-
## Summary
Generic way to identify shellcode hashing functions.
See #166
## Features
- (tight) loops
- ROR/ROL/SHIFT/XOR/ADD/SUB
- PEB offsets
- PE offsets
-
>> PE-infector -i gta_sa.exe -o injected.exe -s shellcode.raw -m resz
That binary has 32bit arch
That is EXE file
EntryPoint: 0x00424570
ImageBase: 0x00400000
File alignment: 0x00000200
size of …
-
hi my friend how can i create a shellcode.bin from an exe file
thanks
lcale updated
3 years ago
-
DLLs cannot use FindResource when converted into shellcode. Same code works when not loaded using sRDI. Issue seems to be the same as https://github.com/TheWover/donut/issues/70 where the PE stomping …
-
Let say if I inject the shellcode to remote process DLL. May I know if i can execute it using CreateRemoteThread? I tired but the remote process crashed immediately. Thanks!
-
I've started working on an analyzer for `capa` from Fireeye. Will submit PR soon.
From https://github.com/fireeye/capa:
`capa detects capabilities in executable files. You run it against a PE f…
-
Can you provide library files for easy integration?Or could you provide a Visual Studio project for compilation? Thank you.
-
This tool is awesome, the only thing that is missing in my opinion is to have an optional feature to build a PE containing the .bin code generated
so,
1 mode ( the actual one ): generate the .bin fr…
G0ne updated
5 months ago
-
Is it possible to map a DLL in another process?
-
**Describe the bug**
Not sure if it's a bug or not, but once I backdoored a PE executable;, the PE still runs the Sliver shellcode, but never goes to the original EXE code. Making it of course very s…