mirror of
https://github.com/dobin/ShellcodeObfuscationLab
synced 2026-06-08 13:53:31 +00:00
Dobin RutishauserSOL ShellcodeObfuscationLab
Shellcode obfuscations laboratory based on RedSiege Chromatophore.
Results
| What | Library | Includes | Function / IAT | Random | Metasploit |
|---|---|---|---|---|---|
| aes | crypt32.lib, advapi32 | wincrypt.h | Crypt* | 5 | 6 |
| base64 | - | - | - | 3 | 3 |
| base64api | crypt32.lib | wincrypt.h | CryptStringToBinaryA | 5 | 6 |
| bin2ip | Ntdll.lib | ntstatus.h Ip2string.h |
RtlIpv4StringToAddressA | 8 | 10 |
| bin2mac | Ntdll.lib | ntstatus.h Ip2string.h |
RtlEthernetStringToAddressA | 8 | 18 |
| cesar | - | - | - | 2 | 2 |
| jargon | - | - | - | 3 | 2 |
| jigsaw | - | - | - | 2 | 3 |
| offset | - | - | - | 2 | 3 |
| rc4api | - | - | GetProcAddress (SystemFunction033) | 2 | 2 |
| reverse_byte_order | - | - | - | 2 | 2 |
| reverse_hex_string | - | - | - | 2 | 2 |
| twoarray | - | - | - | 2 | 3 |
| uuidapi | rpcrt4.lib | rpc.h | UuidFromStringA | 8 | 11 |
| xor_multibyte | - | - | - | 1 | 2 |
| xor_reverse | - | - | - | 2 | 3 |
| xor_single | - | - | - | 1 | 3 |
| No obfuscation | - | - | - | 2 | 3 |
Usage
Use the x64 native tools command prompt from Visual Studio
so you have access to ml.exe and Windows.h.