-
excuse me,my english is poor!
i use pe2sh to generate a golang-compiled exe to shellcode,then i inject the shellcode and it can run normally on c-compiled shell loader,but when i inject the shellcode…
-
Add support for wildcards and skips for `bytes` feature similar to [Yara hexadecimal strings](https://yara.readthedocs.io/en/stable/writingrules.html#hexadecimal-strings).
-
Hello,
I was wondering. I have a payload that I want to encode and use with an exploit (without having to download it on victim machine aka. user interaction). I realize this is done via msfvenom, …
-
-
Here is the code: https://github.com/glmcdona/Process-Dump/blob/master/pd/dump_process.cpp#L793
The code is `import_summary.COUNT_UNIQUE_IMPORT_ADDRESSES >= 2` but idk is this should be `>= 5` to mat…
-
Thanks for sharing your project. I wonder where I can find the source code of DLLs? Are they written by yourself or from other open source projects?
-
-
**Error**
I get the error below when trying to use StackStrings on a shellcode blob, however it does work (excellently!) when I use it on normal PE files.
Error:
```
Failed while executing plug…
-
补充 #10 中关于shellcode编码器的部分
- 参考书籍《0day安全:软件漏洞分析技术》
-
Hi hasherezade,
Thanks for your great tool. I tested hollows_hunter, it can detect hollow process created by Agenttesla, fareit, formbook. However, it can't detect iexplore.exe created by ursnif tr…