mirror of
https://github.com/kmanc/remote_code_oxidation
synced 2026-06-08 15:21:46 +00:00
Docs href (#88)
* Update index.md * Update process_hollowing.md * Update process_migration.md * Update tcp_reverse_shell.md * Update xor_params.md
This commit is contained in:
+1
-1
@@ -7,7 +7,7 @@ title: "Remote Code Oxidation"
|
||||
[](https://github.com/kmanc/remote_code_oxidation/actions/workflows/linux.yml)
|
||||
[](https://github.com/kmanc/remote_code_oxidation/actions/workflows/windows.yml)
|
||||

|
||||
[](https://raw.githubusercontent.com/kmanc/remote_code_oxidation/master/LICENSE)
|
||||
[](https://raw.githubusercontent.com/kmanc/remote_code_oxidation/main/LICENSE)
|
||||
|
||||
Remote Code Oxidation is a collection of offensive security tools written in Rust. My main goal for the project is to enable offensive security professionals and practitioners to prepare the tools needed for an engagement with as little overhead as possible.
|
||||
|
||||
|
||||
@@ -5,7 +5,7 @@ datatable: true
|
||||
|
||||
# RCO: Process Hollowing
|
||||
|
||||
[](https://github.com/kmanc/remote_code_oxidation/tree/master/process_hollowing)
|
||||
[](https://github.com/kmanc/remote_code_oxidation/tree/main/process_hollowing)
|
||||
|
||||
<div class="datatable-begin"></div>
|
||||
|
||||
@@ -26,9 +26,9 @@ Linux process hollowing functions a little differently. First, the executable cr
|
||||
## Using it
|
||||
|
||||
1. *[Not shown in demo]* Generate shellcode for the desired end result (for example, use [msfvenom](https://book.hacktricks.xyz/shells/shells/msfvenom) to generate a reverse TCP shell shellcode for the target operating system)
|
||||
2. *[Not shown in demo]* Open [the config file](https://github.com/kmanc/remote_code_oxidation/blob/master/rco_config/src/lib.rs)
|
||||
2. *[Not shown in demo]* Open [the config file](https://github.com/kmanc/remote_code_oxidation/blob/main/rco_config/src/lib.rs)
|
||||
and change the shellcode to the shellcode generated in step 1
|
||||
3. *[Optional - shown in [xor_params demo](https://kmanc.github.io/remote_code_oxidation/xor_params.html)]* Encrypt the shellcode and target process using [xor_params](https://github.com/kmanc/remote_code_oxidation/blob/master/xor_shellcode) and update the encrypted shellcode value in [the config file](https://github.com/kmanc/remote_code_oxidation/blob/master/rco_config/src/lib.rs)
|
||||
3. *[Optional - shown in [xor_params demo](https://kmanc.github.io/remote_code_oxidation/xor_params.html)]* Encrypt the shellcode and target process using [xor_params](https://github.com/kmanc/remote_code_oxidation/blob/main/xor_shellcode) and update the encrypted shellcode value in [the config file](https://github.com/kmanc/remote_code_oxidation/blob/main/rco_config/src/lib.rs)
|
||||
4. *[Not shown in demo]* Compile the executable, only including `--features xor` if you did step 3
|
||||
1. Build for Linux target
|
||||
```commandline
|
||||
|
||||
@@ -5,7 +5,7 @@ datatable: true
|
||||
|
||||
# RCO: Process Migration
|
||||
|
||||
[](https://github.com/kmanc/remote_code_oxidation/tree/master/process_migration)
|
||||
[](https://github.com/kmanc/remote_code_oxidation/tree/main/process_migration)
|
||||
|
||||
<div class="datatable-begin"></div>
|
||||
|
||||
@@ -28,9 +28,9 @@ Linux process migration works slightly differently. After temporarily pausing th
|
||||
|
||||
1. *[Not shown in demo]* Generate shellcode for the desired end result (for example, use [msfvenom](https://book.hacktricks.xyz/shells/shells/msfvenom) to generate a reverse TCP
|
||||
shell shellcode for the target operating system)
|
||||
2. *[Not shown in demo]* Open [the config file](https://github.com/kmanc/remote_code_oxidation/blob/master/rco_config/src/lib.rs)
|
||||
2. *[Not shown in demo]* Open [the config file](https://github.com/kmanc/remote_code_oxidation/blob/main/rco_config/src/lib.rs)
|
||||
and change the shellcode to the shellcode generated in step 1
|
||||
3. *[Optional - shown in the [xor_params demo](https://kmanc.github.io/remote_code_oxidation/xor_params.html)]* Encrypt the shellcode and target process using [xor_params](https://github.com/kmanc/remote_code_oxidation/blob/master/xor_shellcode) and update the encrypted shellcode value in [the config file](https://github.com/kmanc/remote_code_oxidation/blob/master/rco_config/src/lib.rs)
|
||||
3. *[Optional - shown in the [xor_params demo](https://kmanc.github.io/remote_code_oxidation/xor_params.html)]* Encrypt the shellcode and target process using [xor_params](https://github.com/kmanc/remote_code_oxidation/blob/main/xor_shellcode) and update the encrypted shellcode value in [the config file](https://github.com/kmanc/remote_code_oxidation/blob/main/rco_config/src/lib.rs)
|
||||
4. *[Not shown in demo]* Compile the executable, only including `--features xor` if you did step 3
|
||||
1. Build for Linux target
|
||||
```commandline
|
||||
|
||||
@@ -5,7 +5,7 @@ datatable: true
|
||||
|
||||
# RCO: TCP Reverse Shell
|
||||
|
||||
[](https://github.com/kmanc/remote_code_oxidation/tree/master/tcp_reverse_shell)
|
||||
[](https://github.com/kmanc/remote_code_oxidation/tree/main/tcp_reverse_shell)
|
||||
|
||||
<div class="datatable-begin"></div>
|
||||
|
||||
@@ -23,7 +23,7 @@ The reverse shells for both Linux and Windows work by establishing a [Transmissi
|
||||
|
||||
## Using it
|
||||
|
||||
1. *[Not shown in demo]* Open [the config file](https://github.com/kmanc/remote_code_oxidation/blob/master/rco_config/src/lib.rs)
|
||||
1. *[Not shown in demo]* Open [the config file](https://github.com/kmanc/remote_code_oxidation/blob/main/rco_config/src/lib.rs)
|
||||
and change the IP address and port to match the IP address of your attacking machine and the port you will use for a listener respectively
|
||||
2. *[Not shown in demo]* Compile the executable
|
||||
1. For Linux targets
|
||||
|
||||
+3
-3
@@ -15,8 +15,8 @@ XOR params performs an [exclusive OR (XOR)](https://en.wikipedia.org/wiki/Exclus
|
||||
## Using it
|
||||
|
||||
1. *[Not shown in demo]* Generate shellcode for the desired end result (for example, use [msfvenom](https://book.hacktricks.xyz/shells/shells/msfvenom) to generate a reverse TCP shell shellcode for the target operating system)
|
||||
2. *[Not shown in demo]* Open [the config file](https://github.com/kmanc/remote_code_oxidation/blob/master/rco_config/src/lib.rs) and change the shellcode to the shellcode generated in step 1
|
||||
3. *[Not shown in demo]* Open [the config file](https://github.com/kmanc/remote_code_oxidation/blob/master/rco_config/src/lib.rs) and change the key to a desired key
|
||||
2. *[Not shown in demo]* Open [the config file](https://github.com/kmanc/remote_code_oxidation/blob/main/rco_config/src/lib.rs) and change the shellcode to the shellcode generated in step 1
|
||||
3. *[Not shown in demo]* Open [the config file](https://github.com/kmanc/remote_code_oxidation/blob/main/rco_config/src/lib.rs) and change the key to a desired key
|
||||
4. *[Not shown in demo]* Compile the executable
|
||||
1. For Linux
|
||||
```commandline
|
||||
@@ -27,4 +27,4 @@ XOR params performs an [exclusive OR (XOR)](https://en.wikipedia.org/wiki/Exclus
|
||||
cargo build --target x86_64-pc-windows-gnu -p xor_params --release
|
||||
```
|
||||
5. Run the executable
|
||||
6. Open [the config file](https://github.com/kmanc/remote_code_oxidation/blob/master/rco_config/src/lib.rs) and change encrypted payload to the output of step 5
|
||||
6. Open [the config file](https://github.com/kmanc/remote_code_oxidation/blob/main/rco_config/src/lib.rs) and change encrypted payload to the output of step 5
|
||||
|
||||
Reference in New Issue
Block a user