mirror of
https://github.com/kmanc/remote_code_oxidation
synced 2026-06-08 15:21:46 +00:00
kmanc
645a41a9ed
* Update index.md * Update process_hollowing.md * Update process_migration.md * Update tcp_reverse_shell.md * Update xor_params.md
1.5 KiB
1.5 KiB
title
| title |
|---|
| XOR Params |
RCO: XOR Params
How it works
XOR params performs an exclusive OR (XOR) operation on each byte of the shellcode with each byte of the key (repeating the key if need be).
Using it
- [Not shown in demo] Generate shellcode for the desired end result (for example, use msfvenom to generate a reverse TCP shell shellcode for the target operating system)
- [Not shown in demo] Open the config file and change the shellcode to the shellcode generated in step 1
- [Not shown in demo] Open the config file and change the key to a desired key
- [Not shown in demo] Compile the executable
- For Linux
cargo build -p xor_params --release- For Windows
cargo build --target x86_64-pc-windows-gnu -p xor_params --release - Run the executable
- Open the config file and change encrypted payload to the output of step 5