diff --git a/README.md b/README.md index 9d73f83..0b0e322 100644 --- a/README.md +++ b/README.md @@ -10,14 +10,14 @@ A simple DLL payload loader written in C incorporating the features I have learn - Indirect syscalls with Syswhispers3 - jumper_randomized - Payload execution via Threadpool API - DLL unhooking -- Import Address Table Camoflage +- Import Address Table Camouflage - Execution delays via API Hammering - API Hashing ## Usage - Clone the Repository -- Run `make` to compile the dll -- `python310.dll` should be generated in the the `dist\` folder +- Run `make` to compile the DLL +- `python310.dll` should be generated in the `dist\` folder - Copy the `pythonw.exe` and `python310.dll` to the victim machine - Run `pythonw.exe` - It should DLL sideload `python310.dll` and run the shellcode @@ -35,6 +35,6 @@ A simple DLL payload loader written in C incorporating the features I have learn ## Note -> **Shellcode Encryption :** The shellcode is being fetched from a remote server, providing SSL Support. I haven't incorporated any shellcode encryption and decryption procedures to keep the loader simple and maintain a low entropy. +> **Shellcode Encryption:** The shellcode is being fetched from a remote server, providing SSL Support. I haven't incorporated any shellcode encryption and decryption procedures to keep the loader simple and maintain a low entropy. > -> **EDR Evasion? :** This is my first DLL Payload Loader, it can easily bypass many AV solutions and EDRs but some of the techniques it incorporates aren't the best, so as I keep learning I'll make better loaders! \ No newline at end of file +> **EDR Evasion? :** This is my first DLL Payload Loader, it can bypass many AV solutions and EDRs but some of the techniques it incorporates aren't the best, so as I keep learning I'll make better loaders!