update README.md

This commit is contained in:
restkhz
2025-03-14 19:31:07 +01:00
parent a109e2fb46
commit 54d214eb63
2 changed files with 10 additions and 2 deletions
+9 -1
View File
@@ -8,7 +8,10 @@ Two modes:
- non-standalone: To make an encrypted DLL **WITHOUT** KEY stored in the DLL.You can use it for sideload/rundll32 but you need to pass the key. (So even if the sample is captured, the shellcode will be still difficult to recover)
- standalone: To make an encrypted DLL **WITH** KEY stored in the DLL. You can use it for sideload/hijack or in a printnightmare-like scenario.
VT: 2/72 (13/3/2025)
VT: 3/72 (14/3/2025)
![ShellcodeEncrypt2Dll_vs_VT](https://raw.githubusercontent.com/restkhz/blogImages/main/img/屏幕截图_20250313_050702.png)
@@ -24,7 +27,8 @@ Dependencies:
pip install pycryptodome
sudo apt install mingw-w64
```
I know no one wants to memorize a bunch of arguments.
Edit your key in the `ShellcodeEncrypt2Dll.py`
Example:
```
@@ -62,3 +66,7 @@ The `shellcode` and `function names` like `VirtuallAlloc`, `CreateThread` etc wi
The standalone mode will store the key in the DLL. Decrypt itself when running.
The non-standalone mode needs your key as a parameter to decrypt itself when running.
## Disclaimer
Submitted to VirusTotal already. Only for educational purposes.
+1 -1
View File
@@ -122,7 +122,7 @@ python ShellcodeEncrypt2Dll.py --standalone shellcode.raw
print(result.stdout)
except FileNotFoundError:
print("[-] x86_64-w64-mingw32-gcc didn't work out properly or wasn't found.\nTry: \"sudo apt install mingw-w64\"")
print("[-] x86_64-w64-mingw32-g++ didn't work out properly or wasn't found.\nTry: \"sudo apt install mingw-w64\"")
sys.exit(1)