matro7sh / 221b

Bake shellcode to get malicious.exe
21 stars 1 forks source link

[Feat] - Add the ability to apply a signature to a binary #6

Open jenaye opened 1 year ago

jenaye commented 1 year ago

in fact, when a payload has a correct icon and signature, it reduces its chances of being triggered.

Ex : https://github.com/paranoidninja/CarbonCopy

TomChv commented 1 year ago

CarbonCopy has not been updated since 2019, however I can put it into a docker image to easily use it.

What do you think? That will require the user to have Docker on its machine tho. Otherwise it may be complex because we cannot just bundle the python script on our repository

jenaye commented 1 year ago

mh i don't know, it seems very heavy and impractical for the user, but the tool works well. maybe it's possible to reimplement it in go?

TomChv commented 1 year ago

That's actually a great idea! It's a small tool so I might be able to copy it

TomChv commented 1 year ago

Is it related to #12?

jenaye commented 1 year ago

Nop, It's a little different look: image