search

mandiant / flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.
Apache License 2.0
6.38k stars 900 forks source link

Add BlobRunner for problematic shellcodes - simplifies shellcode load into debugger #412

Closed doomedraven closed 1 year ago

doomedraven commented 2 years ago

Hello, I have had to analyze to analye shellcode that was resisting the original method of shellcode mapping to memory(copy hex bytes, allocate user memory, paste). So found this tool pretty useful for this case.

https://github.com/OALabs/BlobRunner

Thanks

PS i can provide shellcode details in private

vm-packages commented 1 year ago

Thank you for your feedback! We've been working on major updates to FLARE VM over the last year. The now revamped FLARE VM has just been released and will make the project more open and maintainable. Please check out our blog post at https://www.mandiant.com/resources/blog/flarevm-open-to-public and give the new installation a try.

If this problem still persists with the new installation, please report:

Please note that we use this message to close all legacy issues in this repository. We look forward to your feedback and support for the next generation of FLARE VM.