I have developed a fast emulator for modern shellcodes, that perform huge loops of millions of instructions emulated for resolving API or for other stuff.
The emulator is in Rust and all the few dependencies as well, so the rust safety is good for emulating malware.
There are shellcodes that can be emulated from the beginning to the end, but when this is not possible the tool has many features that can be used like a console, a memory tracing, register tracing, and so on.
https://github.com/sha0coder/scemu
In less than two seconds we have emulated 7 millions of instructions arriving to the recv.
At this point we have some IOC like the ip:port where it's connecting and other details.
Lets see what happens after the recv() spawning a console at position: 7,012,204
target/release/scemu -f shellcodes/shikata.bin -vv -c 7012204
The "ret" instruction is going to jump to the buffer read with recv() so is a kind of stager.
The option "-e" or "--endpoint" is not ready for now, but it will allow to proxy the calls to get the next stage automatically, but for now we have the details to get the stage.
SCEMU also identify all the Linux syscalls for 32bits shellcodes:
The encoder used in shellgen is also supported https://github.com/MarioVilas/shellgen
Let's check with cobalt-strike:
In verbose mode we could do several greps to see the calls and correlate with ghidra/ida/radare or for example grep the branches to study the emulation flow.
target/release/scemu -f shellcodes/rshell_sgn.bin -vv | grep j
target/release/scemu -f shellcodes/rshell_sgn.bin -vv -c 44000 -l
Read more
- Tools Used For Hacking
- Pentest Box Tools Download
- Pentest Tools List
- Hacker Tools For Windows
- Kik Hack Tools
- Nsa Hacker Tools
- Hack Tools For Mac
- Hak5 Tools
- New Hacker Tools
- Free Pentest Tools For Windows
- Pentest Tools Open Source
- Hack And Tools
- Hacker Tools For Windows
- Hacker Tools Linux
- Black Hat Hacker Tools
- Pentest Tools
- New Hack Tools
- Pentest Tools Apk
- Hack Tools Mac
- Hacker Search Tools
- Hack Tools Download
- Hack And Tools
- Pentest Tools Download
- Hack Tools For Mac
- Pentest Tools Find Subdomains
- Hacker Tool Kit
- Tools For Hacker
- Pentest Tools Download
- What Are Hacking Tools
- World No 1 Hacker Software
- Pentest Tools List
- What Are Hacking Tools
- Best Pentesting Tools 2018
- Pentest Tools Framework
- Hacks And Tools
- Pentest Tools Review
- Game Hacking
- Hack Tools Pc
- Hacker Tools 2020
- Hacking Tools
- Pentest Tools For Mac
- Hacker Tools Free Download
- Beginner Hacker Tools
- Underground Hacker Sites
- Hacking Tools Windows
- Nsa Hack Tools
- Hacker Tools Windows
- Hack And Tools
- Hacking Tools For Kali Linux
- Android Hack Tools Github
- Pentest Tools Linux
- Black Hat Hacker Tools
- Hacking Tools Name
- Pentest Tools For Ubuntu
- Hacking Tools Free Download
- Hacking Tools Github
- Pentest Reporting Tools
- Hacking Tools Pc
- Pentest Tools
- Hacking Tools Free Download
- Pentest Tools Framework
- Hacker Tools
- Hack Tools For Mac
- Pentest Tools
- Pentest Automation Tools
- Game Hacking
- Nsa Hacker Tools
- Physical Pentest Tools
- Pentest Tools Framework
- Pentest Tools Find Subdomains
- Android Hack Tools Github
- Hacking Tools For Pc
- Hacking Tools Github
- Pentest Tools Nmap
- Hacking Tools For Mac
- Pentest Tools Find Subdomains
- Hacking Tools And Software
- Kik Hack Tools
- Hacker Techniques Tools And Incident Handling
- Hack Tool Apk No Root
- Hacker Tools Apk Download
- Hack Tools For Games
- Tools Used For Hacking
- Hacking Tools
- Pentest Tools Url Fuzzer
- Hack Tools Github
- Hacker Tools Software
- Hacker Tool Kit
- Hacking Tools For Games
- Github Hacking Tools
- Hack Tool Apk No Root
- Pentest Tools Website Vulnerability
- Hacking Tools
- Pentest Tools For Android
- Hack Tools Mac
- Hacking Tools For Beginners
- Bluetooth Hacking Tools Kali
- Hacker Techniques Tools And Incident Handling
- Hacker Tools Online
- Pentest Tools Port Scanner
- How To Hack
- Hack Tools For Games
- Nsa Hack Tools
- Hack Tool Apk No Root
- Game Hacking
- What Is Hacking Tools
- Hacker Tools 2020
- Hack Tools Github
- Hacker Tools Mac
- Hacking Tools For Windows 7
No comments:
Post a Comment