admin/dobin-ShellcodeObfuscationLab
1
0
Fork 0
mirror of https://github.com/dobin/ShellcodeObfuscationLab synced 2026-06-08 13:53:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

doc: fix

Browse Source
This commit is contained in:
Dobin Rutishauser
2025-05-21 12:00:45 +02:00
parent 377ca99c1b
commit c6d622edf9
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+1 -1
View File
@@ -72,7 +72,7 @@ The "metasploit" does not execute the shellcode, only decodes and prints it.
Conclusion:
* The type of encoding/encryption doesnt matter
* More important is if a windows API is being used/imported (static analysis, e.g. IAT in PE)
* Note that NO obfuscation metasploit outperforms AES encryption, base64 windows api, ip-, mac- and uuid-encoding
* Note that the "NO-obfuscation" (plaintext) metasploit outperforms AES encryption, base64 windows api, ip-, mac- and uuid-encoding
* VirusTotal has maybe one memory scanner. The rest seem to be static analysis.
| **What** | **Library** | **Includes** | **Function / IAT** | **Random** | **Metasploit** |