From 91c28afef00b9832cbcdddcee0298d32448a993a Mon Sep 17 00:00:00 2001 From: C5pider <51360176+Cracked5pider@users.noreply.github.com> Date: Wed, 24 Aug 2022 15:41:18 +0200 Subject: [PATCH] Update README.md added Note --- README.md | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 270df30..ac24099 100644 --- a/README.md +++ b/README.md @@ -6,8 +6,13 @@ Ekko -A small sleep obfuscation technique that uses `CreateTimerQueueTimer` Win32 API. -Proof of Concept. Can be done better +A small sleep obfuscation technique that uses `CreateTimerQueueTimer` Win32 API.
+Proof of Concept. Can be done better.
+ +### NOTE +This implementation has known flawes.
+So I wouldn't recommend using it without knowing how it works or know how to spot and fix those flaws.
+TLDR: don't copy and past it into your implants. ### Credit - [Austin Hudson (@SecIdiot)](https://twitter.com/ilove2pwn_) https://suspicious.actor/2022/05/05/mdsec-nighthawk-study.html