• XSS.stack #1 – первый литературный журнал от юзеров форума

c++ shellcode injection help hiding shellcode in memory after decryption

GoldenK9

floppy-диск
Забанен
Регистрация
03.05.2023
Сообщения
6
Реакции
1
Пожалуйста, обратите внимание, что пользователь заблокирован
Hi can some good c++ expert help me with this problem,

I successfully create my shellcode injector in local memory, but still have one more problem i face as in the picture bellow after decrypting the shellcode and running its naked in memory if i can see the naked code the AV still can see this naked and detect it can some one help fix this problem and prevent av and process hacker from see the shellcode naked and hidding it

dd.png
 
Пожалуйста, обратите внимание, что пользователь заблокирован
It is not an easy thing to do in general for native code, you could try something like this: https://xss.pro/threads/64259/ - but this thing is also not ideal, because VEH handler needs to be unencrypted all the time.
 
Пожалуйста, обратите внимание, что пользователь заблокирован
It is not an easy thing to do in general for native code, you could try something like this: https://xss.pro/threads/64259/ - but this thing is also not ideal, because VEH handler needs to be unencrypted all the time.
Thanks for your replay but does this make the AV detect my shellcode or its not that important , once i use api hashing is good ?
 


Напишите ответ...
  • Вставить:
Прикрепить файлы
Верх