I have developed a fast emulator for modern shellcodes, that perform huge loops of millions of instructions emulated for resolving API or for other stuff.
The emulator is in Rust and all the few dependencies as well, so the rust safety is good for emulating malware.
There are shellcodes that can be emulated from the beginning to the end, but when this is not possible the tool has many features that can be used like a console, a memory tracing, register tracing, and so on.
https://github.com/sha0coder/scemu
In less than two seconds we have emulated 7 millions of instructions arriving to the recv.
At this point we have some IOC like the ip:port where it's connecting and other details.
Lets see what happens after the recv() spawning a console at position: 7,012,204
target/release/scemu -f shellcodes/shikata.bin -vv -c 7012204
The "ret" instruction is going to jump to the buffer read with recv() so is a kind of stager.
The option "-e" or "--endpoint" is not ready for now, but it will allow to proxy the calls to get the next stage automatically, but for now we have the details to get the stage.
SCEMU also identify all the Linux syscalls for 32bits shellcodes:
The encoder used in shellgen is also supported https://github.com/MarioVilas/shellgen
Let's check with cobalt-strike:
In verbose mode we could do several greps to see the calls and correlate with ghidra/ida/radare or for example grep the branches to study the emulation flow.
target/release/scemu -f shellcodes/rshell_sgn.bin -vv | grep j
target/release/scemu -f shellcodes/rshell_sgn.bin -vv -c 44000 -l
- Hacking Tools Software
- Tools For Hacker
- How To Install Pentest Tools In Ubuntu
- Hacking Tools Usb
- Pentest Tools Review
- Nsa Hacker Tools
- Hacking Tools And Software
- Hack App
- Hacking Tools Github
- Pentest Tools Windows
- Hacks And Tools
- Hacker Tools Online
- Hacker
- Hack Tools Download
- Hacking Tools Download
- Pentest Tools Kali Linux
- Hacker Tools Mac
- Best Hacking Tools 2020
- Hack Website Online Tool
- Hackrf Tools
- Underground Hacker Sites
- Hacker Tools 2019
- Hack Tool Apk
- Hacker Tools Github
- Pentest Tools
- Best Hacking Tools 2019
- Hacker Tools For Mac
- Hacker Tools List
- Bluetooth Hacking Tools Kali
- Hacker Tool Kit
- Hacker Techniques Tools And Incident Handling
- Pentest Tools Review
- Easy Hack Tools
- Hacking Tools Windows
- Pentest Tools For Mac
- Install Pentest Tools Ubuntu
- Hack Apps
- Pentest Tools Linux
- Hacking Tools Pc
- Hacking Tools For Beginners
- New Hacker Tools
- New Hacker Tools
- Pentest Tools Alternative
- Hacker Tools For Pc
- World No 1 Hacker Software
- Hacker Tools
- Hacking App
- New Hacker Tools
- Tools For Hacker
- Pentest Tools Url Fuzzer
- Hack Tools For Ubuntu
- Hacker Tools 2020
- Pentest Recon Tools
- How To Install Pentest Tools In Ubuntu
- Hacking Tools Software
- Pentest Tools
- Hack Tools Download
- Pentest Tools Kali Linux
- Hacker Tools
- Hacking Tools Kit
- Hack Tools Download
- Pentest Tools For Ubuntu
- World No 1 Hacker Software
- How To Install Pentest Tools In Ubuntu
- Top Pentest Tools
- Hacking Tools Github
- Hacker Tools Github
- Pentest Tools Kali Linux
- Hacking App
- Hack Tool Apk No Root
- Free Pentest Tools For Windows
- Pentest Tools Github
- Hack Tools Github
- What Is Hacking Tools
- Pentest Tools Find Subdomains
- Easy Hack Tools
- Hak5 Tools
- Wifi Hacker Tools For Windows
- Hack And Tools
- Hack Tools Pc
- Best Hacking Tools 2019
- Easy Hack Tools
- Hacking Tools Name
- Pentest Tools
- Pentest Tools Apk
- Pentest Tools List
- Hacker Tools Mac
- Pentest Recon Tools
- Hacking Tools For Games
- Hacker Tool Kit
- Hacker Tools Apk
- Pentest Automation Tools
- Hacker Techniques Tools And Incident Handling
- Wifi Hacker Tools For Windows
- Pentest Tools Apk
- Hack Tools For Ubuntu
- Physical Pentest Tools
- Hacking Tools Free Download
- Hacking Tools 2019
- Hacker Tool Kit
- Hacking Tools Windows
- Hacker Tools Online
- Physical Pentest Tools
- Hacking Tools 2019
- Blackhat Hacker Tools
- Hacking Tools Github
- Pentest Tools Kali Linux
- Hacker Tools 2020
- Hack Tools Github
- What Is Hacking Tools
- Pentest Automation Tools
- Pentest Tools Download
- Hack Tool Apk No Root
- Hacker Tools Apk
- Hacker Tools Github
- Hacking Tools 2019
- Hack And Tools
- Ethical Hacker Tools
- Hacker Tools For Ios
0 comments:
Post a Comment