diff --git a/README.md b/README.md index a69bdc6..dd29329 100644 --- a/README.md +++ b/README.md @@ -1 +1,33 @@ -# xorInject \ No newline at end of file +# XOR Encrypted Shellcode Execution via Desktop Enumeration + +## Description + +This Boo language script demonstrates an alternative method for shellcode execution using Windows desktop enumeration callbacks. The implementation includes XOR encryption for additional obfuscation and leverages the .NET framework through Boo's Python-inspired syntax. + +## Features + +- **XOR Decryption**: Runtime decryption of shellcode using XOR operation +- **Desktop Enumeration**: Utilizes `EnumDesktopWindows` for execution +- **Memory Management**: Implements proper memory allocation and protection +- **Callback Implementation**: Uses delegate-based callback mechanism + +## Technical Details + +#### Components +- **Memory Allocation**: Uses `VirtualAlloc` with `PAGE_EXECUTE_READWRITE` protection +- **Desktop Handling**: Leverages `GetThreadDesktop` for current desktop context +- **Shellcode Processing**: Converts MAC-address formatted encrypted bytes to executable code +- **Execution Method**: Implements callback-based execution through desktop window enumeration + +## Prerequisites + +- Boo compiler +- .NET Framework +- Windows environment +- Python (for shellcode encryption) + +## Usage + +1. Encrypt your shellcode using the provided Python script +2. Insert the encrypted shellcode into the Boo script +3. Compile and execute the Boo script