From 13938fcbe298836770eef651876f236b8d46c7d0 Mon Sep 17 00:00:00 2001 From: "Mariusz B. / mgeeky" Date: Wed, 29 Sep 2021 13:04:15 +0200 Subject: [PATCH] readme --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 04e0d2a..845d1f1 100644 --- a/README.md +++ b/README.md @@ -15,10 +15,10 @@ Questions proven otherwise so I decided to release this unweaponized PoC to docu This PoC is a demonstration of rather simple technique, already known to the offensive community (so I'm not bringin anything new here really) in hope to disclose secrecy behind magic showed by commercial frameworks such as [MDSec's Nighthawk C2](https://www.mdsec.co.uk/nighthawk/) that demonstrate their evasion capabilities targeting both aforementioned memory scanners. -Here's a comparison: +**Here's a comparison:** 1. Beacon not encrypted -2. Beacon encrypted +2. **Beacon encrypted** (_fluctuating_) ![comparison](images/comparison.png)