admin/mgeeky-ShellcodeFluctuation
1
0
Fork 0
mirror of https://github.com/mgeeky/ShellcodeFluctuation synced 2026-06-06 16:14:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

readme

Browse Source
This commit is contained in:
Mariusz B. / mgeeky
2021-09-30 14:51:16 +02:00
parent eb410a4599
commit 6a32579edf
2 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+3 -2
View File
@@ -49,7 +49,8 @@ ORCA showed that:
2. flip shellcode's pages to no-access
3. and then catch Access Violation exceptions that will occur as soon as the shellcode wants to resume its execution and decrypt + flip its memory pages back to Read+Execute.
This implementation contains this idea implemented, available with option `2` in `<fluctuate>`.
This implementation contains this idea implemented, available with option `2` in `<fluctuate>`.
Be sure to check out other his projects as well.
---
@@ -163,7 +164,7 @@ But hey, still none of the bytes differ compared to what is lying out there on t
C:\> ShellcodeFluctuation.exe beacon64.bin 2
```
![no-access](images/no-access.png)
![no-access](images/no-access1.png)
That will cause the shellcode to fluctuate between `RX` and `NA` pages effectively:
images/no-access1.png
BIN
View File
Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 128 KiB