This commit is contained in:
Mariusz B. / mgeeky
2021-09-29 13:04:15 +02:00
parent 725fdaefe7
commit 13938fcbe2
+2 -2
View File
@@ -15,10 +15,10 @@ Questions proven otherwise so I decided to release this unweaponized PoC to docu
This PoC is a demonstration of rather simple technique, already known to the offensive community (so I'm not bringin anything new here really) in hope to disclose secrecy behind magic showed by commercial frameworks such as [MDSec's Nighthawk C2](https://www.mdsec.co.uk/nighthawk/) that demonstrate their evasion capabilities targeting both aforementioned memory scanners.
Here's a comparison:
**Here's a comparison:**
1. Beacon not encrypted
2. Beacon encrypted
2. **Beacon encrypted** (_fluctuating_)
![comparison](images/comparison.png)