uuid-loader

KO | EN

gitlite — search

#javascript #python #react #ai #go #rust #docker #nodejs #windows #cli #kubernetes #awesome-list #openai #open-source

(★ 86)

UUID based Shellcode loader for your favorite C2

uuid-loader 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# UUID Loader

Experimental Stage-1 Shellcode Loader, using IE COM Object Methods to fetch Shellcode and uses UUID as shellcode.

# Features

- Fetches Cobalt Shellcode from Github using IE-Com 
- Shellcode returns is bunch of UUID Strings
- Uses UuidFromStringA callback to load shellcode into allocated heap area
- Dynamic API Resolving to make IAT Look clean
- Multiple Preliminary Checks before execution
- Implements BlockDLL;s to block non microsoft signed DLL to get loader - Blocking EDR DLL Hooks
- Does Local Process Injection, avoiding touching remote process 
- Works fine with Cobalt Strike x64 Stageless Shellcode

# Upcoming

- Obfuscated UUIDs and deobfuscate before triggering callback
- Ability to convert UUID to shellcode and inject remote using thread hijacking
- Using SGN or custom shellcode encoder before generating UUID Shellcode
 
 # Usage
 
 - Host your shellcode as UUIDs 
 - Hardcode the raw link in Line: 206 inside downloader.h

# Idea

https://research.nccgroup.com/2021/01/23/rift-analysing-a-lazarus-shellcode-execution-method/

Credits to [slaeryan](https://twitter.com/slaeryan) for IE COM code from [Wraith](https://github.com/slaeryan/AQUARMOURY/tree/master/Wraith)

uuid-loader

uuid-loader 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

uuid-loader

uuid-loader 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README