search

BishopFox / sliver

Adversary Emulation Framework
GNU General Public License v3.0
8.32k stars 1.09k forks source link

arm64 shell code #1385

Open trueToastedCode opened 1 year ago

trueToastedCode commented 1 year ago

When creating a shell code profile for windows, it assumes that every machine has amd64.

sliver > profiles new --mtls 192.168.122.1 --format shellcode win-shellcode

[*] Saved new implant profile win-shellcode

sliver > profiles

 Profile Name    Implant Type   Platform        Command & Control               Debug   Format      Obfuscation   Limitations 
=============== ============== =============== =============================== ======= =========== ============= =============
 win-shellcode   session        windows/amd64   [1] mtls://192.168.122.1:8888   false   SHELLCODE   enabled

It would be nice, if arm64 shell code to cover all versions of Windows would be available as well.

rkervella commented 1 year ago

When creating a shell code profile for windows, it assumes that every machine has amd64.

Well you did not specify the architecture in the profiles command, so we have to set some defaults here. Although in this case it wouldn't have changed much since we currently can't produce arm64 shellcodes. We're relying on Donut under the hood, and Donut currently only supports x86 and x86_64.