I have developed a fast emulator for modern shellcodes, that perform huge loops of millions of instructions emulated for resolving API or for other stuff.
The emulator is in Rust and all the few dependencies as well, so the rust safety is good for emulating malware.
There are shellcodes that can be emulated from the beginning to the end, but when this is not possible the tool has many features that can be used like a console, a memory tracing, register tracing, and so on.
https://github.com/sha0coder/scemu
In less than two seconds we have emulated 7 millions of instructions arriving to the recv.
At this point we have some IOC like the ip:port where it's connecting and other details.
Lets see what happens after the recv() spawning a console at position: 7,012,204
target/release/scemu -f shellcodes/shikata.bin -vv -c 7012204
The "ret" instruction is going to jump to the buffer read with recv() so is a kind of stager.
The option "-e" or "--endpoint" is not ready for now, but it will allow to proxy the calls to get the next stage automatically, but for now we have the details to get the stage.
SCEMU also identify all the Linux syscalls for 32bits shellcodes:
The encoder used in shellgen is also supported https://github.com/MarioVilas/shellgen
Let's check with cobalt-strike:
In verbose mode we could do several greps to see the calls and correlate with ghidra/ida/radare or for example grep the branches to study the emulation flow.
target/release/scemu -f shellcodes/rshell_sgn.bin -vv | grep j
target/release/scemu -f shellcodes/rshell_sgn.bin -vv -c 44000 -l
Continue reading
- Pentest Tools Port Scanner
- Pentest Tools Port Scanner
- Pentest Tools For Mac
- Hacking Tools 2020
- Pentest Box Tools Download
- Pentest Tools Windows
- Pentest Tools Github
- Game Hacking
- Hacking Tools For Pc
- New Hacker Tools
- Hacking Apps
- Game Hacking
- Pentest Tools Framework
- Hacker Tools For Ios
- Pentest Tools Find Subdomains
- Hacking Tools Mac
- Underground Hacker Sites
- Hacking Tools For Pc
- Pentest Tools For Mac
- Pentest Tools For Mac
- Termux Hacking Tools 2019
- Hacking Tools Name
- Hacker Tool Kit
- Best Pentesting Tools 2018
- Physical Pentest Tools
- Hacker Techniques Tools And Incident Handling
- Hackrf Tools
- Hack Tools Online
- Hacker Search Tools
- Hacker
- Pentest Tools Subdomain
- Hacker Tools For Ios
- Pentest Tools For Android
- Pentest Tools Online
- Hacking Tools
- Hacker Tools Linux
- Hacking Tools Mac
- Hacker Tools Online
- Pentest Tools Nmap
- Hacking Tools 2019
- Hacking Tools Windows
- Hack Tool Apk No Root
- Hack Tools
- Hacker Tools Linux
- Pentest Tools Port Scanner
- Hack Tools Github
- Hacking Tools Kit
- Pentest Tools For Mac
- Pentest Tools Tcp Port Scanner
- Hacking Tools Free Download
- Hacking Apps
- Game Hacking
- Hacking Tools Usb
- Hack Website Online Tool
- Pentest Tools For Windows
- Pentest Tools For Windows
- Android Hack Tools Github
- Usb Pentest Tools
- Black Hat Hacker Tools
- Pentest Tools For Android
- Pentest Tools Subdomain
- World No 1 Hacker Software
- Black Hat Hacker Tools
- Hack Website Online Tool
- Hacker Tools Apk Download
- Hacking Tools Pc
- Best Hacking Tools 2019
- Hack Tools
- Hacking Tools Usb
- Hack Tools For Mac
- Pentest Box Tools Download
- Hack Tools For Mac
- Hacker Tools Apk Download
- Hacking Tools Online
- Android Hack Tools Github
- New Hacker Tools
- Hacker Tools 2020
- Hack Tool Apk No Root
- Install Pentest Tools Ubuntu
- Hacking Tools Kit
- Hacking Tools Software
- Pentest Tools Download
- Hacking Tools
- Blackhat Hacker Tools
- Easy Hack Tools
- Hacker Tools Free
- Hacking Tools For Windows 7
- Hak5 Tools
- Hack Tools
- Bluetooth Hacking Tools Kali
- Hacking Tools For Pc
- Hacking Tools Mac
- Pentest Automation Tools
- Pentest Tools For Ubuntu
- Easy Hack Tools
- Hacking Tools And Software
- Hack Tools For Windows
- Hacker Tools Apk Download
- Pentest Tools Bluekeep
- Free Pentest Tools For Windows
- Pentest Tools Port Scanner
- Pentest Box Tools Download
- Hack Tools For Pc
- Pentest Tools Website Vulnerability
- Best Hacking Tools 2019
- Kik Hack Tools
- Hacker Tools Hardware
- Hacking Tools Windows
- Hack Tools Github
- Pentest Tools Online
- How To Install Pentest Tools In Ubuntu
- How To Make Hacking Tools
- Hack Tools Download
- Termux Hacking Tools 2019
- Hacker
- Hackers Toolbox
- Pentest Tools Tcp Port Scanner
- Hacker Tools Free
- Hacking Tools For Beginners
- Hack Tools 2019
- Wifi Hacker Tools For Windows
- New Hacker Tools
- Hacker Techniques Tools And Incident Handling
- Hacking Tools Download
- Pentest Tools
- Pentest Tools Subdomain
- Termux Hacking Tools 2019
- Hacking Tools Windows 10
- Hacking Tools For Mac
- Hacker Tools
- Top Pentest Tools
- Hack Tools Pc
- Hack Tools For Ubuntu
- Free Pentest Tools For Windows
- Hack Tools Github
- Hack And Tools
- Hack Tools
- Hacker Tools 2020
- Hacker Tools Apk
- Hacking Tools Pc
- Hacker Tools For Mac
- Pentest Tools List
- Hacking Tools For Mac
- Hacking Tools Usb
No comments:
Post a Comment