mirror of
https://github.com/restkhz/ShellcodeEncrypt2DLL
synced 2026-06-06 16:34:37 +00:00
update README.md
This commit is contained in:
@@ -8,7 +8,10 @@ Two modes:
|
||||
- non-standalone: To make an encrypted DLL **WITHOUT** KEY stored in the DLL.You can use it for sideload/rundll32 but you need to pass the key. (So even if the sample is captured, the shellcode will be still difficult to recover)
|
||||
- standalone: To make an encrypted DLL **WITH** KEY stored in the DLL. You can use it for sideload/hijack or in a printnightmare-like scenario.
|
||||
|
||||
|
||||
|
||||
VT: 2/72 (13/3/2025)
|
||||
|
||||
VT: 3/72 (14/3/2025)
|
||||
|
||||

|
||||
@@ -24,7 +27,8 @@ Dependencies:
|
||||
pip install pycryptodome
|
||||
sudo apt install mingw-w64
|
||||
```
|
||||
|
||||
I know no one wants to memorize a bunch of arguments.
|
||||
Edit your key in the `ShellcodeEncrypt2Dll.py`
|
||||
|
||||
Example:
|
||||
```
|
||||
@@ -62,3 +66,7 @@ The `shellcode` and `function names` like `VirtuallAlloc`, `CreateThread` etc wi
|
||||
|
||||
The standalone mode will store the key in the DLL. Decrypt itself when running.
|
||||
The non-standalone mode needs your key as a parameter to decrypt itself when running.
|
||||
|
||||
## Disclaimer
|
||||
|
||||
Submitted to VirusTotal already. Only for educational purposes.
|
||||
|
||||
@@ -122,7 +122,7 @@ python ShellcodeEncrypt2Dll.py --standalone shellcode.raw
|
||||
print(result.stdout)
|
||||
|
||||
except FileNotFoundError:
|
||||
print("[-] x86_64-w64-mingw32-gcc didn't work out properly or wasn't found.\nTry: \"sudo apt install mingw-w64\"")
|
||||
print("[-] x86_64-w64-mingw32-g++ didn't work out properly or wasn't found.\nTry: \"sudo apt install mingw-w64\"")
|
||||
sys.exit(1)
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user