I have developed a fast emulator for modern shellcodes, that perform huge loops of millions of instructions emulated for resolving API or for other stuff.
The emulator is in Rust and all the few dependencies as well, so the rust safety is good for emulating malware.
There are shellcodes that can be emulated from the beginning to the end, but when this is not possible the tool has many features that can be used like a console, a memory tracing, register tracing, and so on.
https://github.com/sha0coder/scemu
In less than two seconds we have emulated 7 millions of instructions arriving to the recv.
At this point we have some IOC like the ip:port where it's connecting and other details.
Lets see what happens after the recv() spawning a console at position: 7,012,204
target/release/scemu -f shellcodes/shikata.bin -vv -c 7012204
The "ret" instruction is going to jump to the buffer read with recv() so is a kind of stager.
The option "-e" or "--endpoint" is not ready for now, but it will allow to proxy the calls to get the next stage automatically, but for now we have the details to get the stage.
SCEMU also identify all the Linux syscalls for 32bits shellcodes:
The encoder used in shellgen is also supported https://github.com/MarioVilas/shellgen
Let's check with cobalt-strike:
In verbose mode we could do several greps to see the calls and correlate with ghidra/ida/radare or for example grep the branches to study the emulation flow.
target/release/scemu -f shellcodes/rshell_sgn.bin -vv | grep j
target/release/scemu -f shellcodes/rshell_sgn.bin -vv -c 44000 -l
More articles
- New Hack Tools
- Hack And Tools
- Hack Tools Github
- Hacker Tools Software
- Termux Hacking Tools 2019
- Hacks And Tools
- Tools For Hacker
- Pentest Tools Find Subdomains
- Hacking Tools 2020
- What Are Hacking Tools
- Pentest Tools Windows
- Hacking Tools Github
- Pentest Tools Apk
- Pentest Tools Tcp Port Scanner
- Pentest Tools Windows
- Hacker
- Hacker Security Tools
- Hacker Tools 2019
- Pentest Tools Linux
- Hack Apps
- Pentest Tools For Android
- How To Make Hacking Tools
- Hacker Tools Software
- Hacking Tools And Software
- Growth Hacker Tools
- Pentest Tools Website Vulnerability
- Hacking Tools Pc
- Game Hacking
- Pentest Tools Alternative
- Hacking Tools Name
- Hacking Tools Software
- Hack Tools Mac
- Hacking Tools For Beginners
- Pentest Tools Kali Linux
- Pentest Tools Find Subdomains
- Android Hack Tools Github
- Pentest Tools Alternative
- Pentest Tools Url Fuzzer
- Hacking Tools For Windows
- Blackhat Hacker Tools
- Hacking Tools Online
- Hack And Tools
- Pentest Tools
- Pentest Tools Bluekeep
- Hack Tools Online
- Pentest Tools Nmap
- Easy Hack Tools
- Hacking Tools Online
- Hacker Tools For Ios
- Hackers Toolbox
- Pentest Reporting Tools
- Best Hacking Tools 2020
- Hacking Tools Name
- Kik Hack Tools
- Pentest Tools Url Fuzzer
- Hack Tools 2019
- Pentest Tools For Ubuntu
- Hack Tools
- Hacking Tools Windows 10
- Hackers Toolbox
- Underground Hacker Sites
- Hacking Apps
- Hack Tools For Windows
- Beginner Hacker Tools
- Hack Tool Apk
- Wifi Hacker Tools For Windows
- Hack Tools 2019
- Hak5 Tools
- Hack App
- Hack Tool Apk
- Hacker Tools For Ios
- Hacking Tools Free Download
- Pentest Tools Find Subdomains
- Pentest Tools
- World No 1 Hacker Software
- Bluetooth Hacking Tools Kali
- Hackers Toolbox
- Hacker Tools Windows
- Hack Tools For Windows
- Hacker Tools Linux
- Pentest Tools Online
- How To Make Hacking Tools
- Termux Hacking Tools 2019
- Pentest Tools Port Scanner
- Hacker Tools For Pc
- Hacking Tools Hardware
- Pentest Tools For Mac
- Kik Hack Tools
- Hacker Tools Software
- Hacking Tools For Windows Free Download
- Hacks And Tools
- Hacking Tools Free Download
- Nsa Hack Tools
- Hacker Tools 2019
- Pentest Reporting Tools
- Hacker Tools Windows
- Hack Tools Download
- Hacking Tools Usb
- Hacking Tools Software
- Hack Tools For Ubuntu
- New Hacker Tools
- Hack Tools For Games
- Game Hacking
- Hacker Tools Hardware
- What Are Hacking Tools
- Hacking Tools Windows
- Pentest Tools Subdomain
- Easy Hack Tools
- Hack Tools Download
- Hack Tools For Windows
- Pentest Tools Tcp Port Scanner
- Hacking Tools And Software
- Hacking Tools For Mac
- Hack Tools Online
- Hacker Tools List
- Hacking Tools Windows
- Hacking Tools 2020
- Hack Tools Mac
- Pentest Reporting Tools
- Hacker Tools Apk
- Hack Tools For Mac
- Computer Hacker
- Nsa Hack Tools Download
- Hacking Tools For Beginners
- Hack Tools For Games
- Hack Tools Mac
- Pentest Tools Github
- Hacker Tools Online
- Pentest Tools Find Subdomains
- Hack Tools For Games
- Growth Hacker Tools
- Physical Pentest Tools
- Best Hacking Tools 2020
- Pentest Tools For Mac
- Free Pentest Tools For Windows
- Pentest Tools List
- Nsa Hack Tools Download
- Hacking App
0 comentários:
Postar um comentário