klezVirus / inceptor

Template-Driven AV/EDR Evasion Framework
Other
1.6k stars 262 forks source link

How to use chain encoding? #50

Open alexgar0 opened 10 months ago

alexgar0 commented 10 months ago

I am wondering, how can i use multiple encoders while compiling native stub with pe2sh? python inceptor.py native -t pe2sh -C llvm -o output.exe -m unhook -e Xor -hw input.exe -e Xor doesn't affect my stub.

klezVirus commented 10 months ago

Hi @alexgar0. May I ask you to expand a bit more on what you mean by "affect my stub"? I'm not sure if you're saying it doesn't xor the shellcode or if you're just saying it doesn't change the main C stub.