caueb / PayloadInResources

Simple AV bypass storing the shellcode in resources and XOR encrypting it.
2 stars 0 forks source link

Working with Clang++ #1

Open Hackerobi opened 4 days ago

Hackerobi commented 4 days ago

Hey there, how did you get the compiling to work? I am on a Win11 using Visual Studio 2022. I do have Clang++ and the tools installed but I don't know how to get it to compile like the instructions showed. test

The below is where I am having issues at

Compile the metadata.rc to .res: rc.exe /r /fo .\metadata.res .\metadata.rc Modify the Caue.cpp line 52 with the XOR key you used and compile with clang++: clang++.exe -O2 -Ob2 -Os -fno-stack-protector -g -Xlinker -pdb:none -Xlinker -subsystem:windows -o Update.exe Caue.cpp metadata.res -luser32 -lkernel32 -fno-unroll-loops -fno-exceptions -fno-rtti

caueb commented 2 days ago

I need more details to help you out. What is the error?

The first command rc.exe /r /fo .\metadata.res .\metadata.rc is to compile the resources (metadata + shellcode). The second one is to compile the executable with the resources together.