go-shellcode
go-shellcode copied to clipboard
Ne0nd0g
A repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques.
I'm wrapping CreateProcess.go or CreateThread.go or CreateThreadNative.go in functions as the following snippet shows ``` func main(){ //Processing runCreateThread() // or syscall, or createProcess... Just the regular functions to pop...
You can use memcpy via msvcrt.dll instead which works on amd64 and 386. ```golang msvcrt := windows.NewLazyDLL("msvcrt") memcpy := msvcrt.NewProc("memcpy") ``` This probably also applies to [ExecuteShellcodeSelf ](https://github.com/Ne0nd0g/merlin/blob/1b0ce52d71da62da21cc8f90b97191308e6fe7a9/pkg/agent/exec_windows.go#L106) in Merlin.
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.0.0-20200302150141-5c8b2ff67527 to 0.1.0. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot] avatar"){kind=avatar}
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.0.0-20200427165652-729f1e841bcc to 0.1.0. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...
Exception 0xc0000005 0x8 0x17220a1dd9f 0x17220a1dd9f PC=0x17220a1dd9f signal arrived during external code execution Execute Shellcode once then i got this error everytime
my bin is from CS. ~~~~~~~~~~~~~~~~~~~~ ShellcodeUtils.exe -i .\raw_x64.bin -o .\raw_x64.txt -mode encrypt -type xor -key hidenpassword -v [-]Output directory: .\ [-]Output file name: raw_x64.txt [-]File contents (hex): [-]XOR encrypting...
