From 91c28afef00b9832cbcdddcee0298d32448a993a Mon Sep 17 00:00:00 2001
From: C5pider <51360176+Cracked5pider@users.noreply.github.com>
Date: Wed, 24 Aug 2022 15:41:18 +0200
Subject: [PATCH] Update README.md added Note
---
README.md | 9 +++++++--
1 file changed, 7 insertions(+), 2 deletions(-)
diff --git a/README.md b/README.md
index 270df30..ac24099 100644
--- a/README.md
+++ b/README.md
@@ -6,8 +6,13 @@ Ekko
-A small sleep obfuscation technique that uses `CreateTimerQueueTimer` Win32 API.
-Proof of Concept. Can be done better
+A small sleep obfuscation technique that uses `CreateTimerQueueTimer` Win32 API.
+Proof of Concept. Can be done better.
+
+### NOTE
+This implementation has known flawes.
+So I wouldn't recommend using it without knowing how it works or know how to spot and fix those flaws.
+TLDR: don't copy and past it into your implants.
### Credit
- [Austin Hudson (@SecIdiot)](https://twitter.com/ilove2pwn_) https://suspicious.actor/2022/05/05/mdsec-nighthawk-study.html