pe_to_shellcode
ropfuscator
pe_to_shellcode | ropfuscator | |
---|---|---|
4 | 5 | |
2,208 | 397 | |
- | -0.3% | |
3.8 | 3.9 | |
9 months ago | 9 months ago | |
C++ | C++ | |
BSD 2-clause "Simplified" License | GNU General Public License v3.0 or later |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
pe_to_shellcode
-
Bypassing Windows Defender (10 Ways)
Finally, we also have the option to transform a native PE back to shellcode. This may be done, for example, via hasherezade's pe_to_shellcode tool.
- Petoshellcode - Converts PE into a shellcode
- pe_to_shellcode: Converts PE so that it can be then injected just like a normal shellcode. (At the same time, the output file remains to be a valid PE). Supports both 32 and 64 bit PEs
- Petoshellcode – Converts PE into a Shellcode
ropfuscator
-
Bypassing Windows Defender (10 Ways)
ropfuscator (sadly only for Linux at the moment)
- Show HN: ROPfuscator – ROP Obfuscator
- ROPfuscator: ROP Obfuscator
- Ropfuscator: ROPfuscator is a fine-grained code obfuscation framework for C/C++ programs using ROP (return-oriented programming).
- GitHub - ropfuscator/ropfuscator: ROPfuscator is a fine-grained code obfuscation framework for C/C++ programs using ROP (return-oriented programming).
What are some alternatives?
DripLoader - Evasive shellcode loader for bypassing event-based injection detection (PoC)
Hikari-LLVM15 - A fork of Hikari Obfuscator [WIP]
dll_to_exe - Converts a DLL into EXE
Alcatraz - x64 binary obfuscator
pypackerdetect - Packing detection tool for PE files
LLVM-Guide - LLVM (Low Level Virtual Machine) Guide. Learn all about the compiler infrastructure, which is designed for compile-time, link-time, run-time, and "idle-time" optimization of programs. Originally implemented for C/C++ , though, has a variety of front-ends, including Java, Python, etc.
donut - Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters
obfy - A tiny C++ obfuscation framework
pwntools - CTF framework and exploit development library
opencilk-project - Monorepo for the OpenCilk compiler. Forked from llvm/llvm-project and based on Tapir/LLVM.
rp - rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries.