search

A1bu5 / shellcodebypass_GUI

Shellcode encoder&loader written in Go language, which can encrypt binary or PE files. It offers a variety of complex encryption algorithms to choose from, with sgn&donut GUI form. The output files include the encrypted binary files and an EXE file compiled using the built-in compiler.
17 stars 1 forks source link

how to use this tool！ #1

Open Mrship12138 opened 4 months ago

Mrship12138 commented 4 months ago

I really like your tool. i hava some questions： Could you please explain the specific meanings of the parameters on the GUI page? Do I need to place the sgn.exe and keystone.dll in the same directory for this GUI tool? I used a bin file generated by Cobalt Strike 4.5, but it couldn’t be opened after processing with the GUI tool. Thank you for taking the time to answer my questions!

A1bu5 commented 4 months ago

Thanks for asking and i m preparing combine more func recently so i missed the guidence of usage, the sgn.exe is now no needed at the latest release, but keystone is a must. However i just realize i didn't put keystone.dll into my code, but i will soon fix this in a moment, and update v0.0.2.1, so u can directly use without anything else. thanks for asking

A1bu5 commented 4 months ago

So actually, the current version(Preversion V0.0.2 ), can work properly after my test. the parameters on the GUI page means are as followings: Input: Path of the bin Output: The name of outputfile, not must to be a bin Architecture: as itself means Encode Count: Number of times to encode the binary (increases overall size), Better choose one or two times, if you encode too much there will be some weird problems. One time of encode would assure to bypass the raw file. Obfusscation Level : Maximum number of bytes for decoder obfuscation Plain Decoder: Do not encode the decoder stub ASCII Payload: Generates a full ASCI printable payload (may take very long time to bruteforce) Safe Mode: Preserve all register values (a.k.a. no clobber) Bad Characters: Its a STRING . Don't use specified bad characters given in hex format (\x00\x01\x02...) Verbose: Very Complicated encode Screenshot 2024-05-24 050939 Screenshot 2024-05-24 051004 Screenshot 2024-05-24 051058

A1bu5 commented 4 months ago

If the problem you mentioned still exists, please keep asking , which do greatly help me to upgrade the current pkg, because there is still much more functions to be add, such as WebScanner, blockchain-based C2 connections, ring signatures, Symbolless Shellcode loader and much more. Every issue is a great help to me and this project