search

frkngksl / Shoggoth

Shoggoth: Asmjit Based Polymorphic Encryptor
623 stars 83 forks source link

Don't work when called inside another shoggoth shellcode #2

Open alexgar0 opened 5 months ago

alexgar0 commented 5 months ago

I'm using two-layer shellcode injection. (program.exe -> inject(loader_shoggoth_shellcode) -> inject(payload_shoggoth_shellcode)). So I'm just trying to inject shellcode from another shellcode. First injection is ok, but when my loader injecting main payload it just do nothing. Works fine if payload is not morphed with shoggoth

frkngksl commented 4 months ago

I couldn't understand your problem properly but If you are trying to inject shellcode into a 32-bit process or your codes are x86, it won't work. If the issue isn't this, can you explain it more clearly?

frkngksl commented 4 months ago

Also, be sure that your injector's memory region, or the region that opens by the injector itself has a write permission. Shoggoth needs a writable memory region to unpack itself.