I have developed a fast emulator for modern shellcodes, that perform huge loops of millions of instructions emulated for resolving API or for other stuff.
The emulator is in Rust and all the few dependencies as well, so the rust safety is good for emulating malware.
There are shellcodes that can be emulated from the beginning to the end, but when this is not possible the tool has many features that can be used like a console, a memory tracing, register tracing, and so on.
https://github.com/sha0coder/scemu
In less than two seconds we have emulated 7 millions of instructions arriving to the recv.
At this point we have some IOC like the ip:port where it's connecting and other details.
Lets see what happens after the recv() spawning a console at position: 7,012,204
target/release/scemu -f shellcodes/shikata.bin -vv -c 7012204
The "ret" instruction is going to jump to the buffer read with recv() so is a kind of stager.
The option "-e" or "--endpoint" is not ready for now, but it will allow to proxy the calls to get the next stage automatically, but for now we have the details to get the stage.
SCEMU also identify all the Linux syscalls for 32bits shellcodes:
The encoder used in shellgen is also supported https://github.com/MarioVilas/shellgen
Let's check with cobalt-strike:
In verbose mode we could do several greps to see the calls and correlate with ghidra/ida/radare or for example grep the branches to study the emulation flow.
target/release/scemu -f shellcodes/rshell_sgn.bin -vv | grep j
target/release/scemu -f shellcodes/rshell_sgn.bin -vv -c 44000 -l
- What Are Hacking Tools
- Hacker Tools 2019
- Tools For Hacker
- Bluetooth Hacking Tools Kali
- Hacker Tools 2020
- Easy Hack Tools
- Hacking Tools For Mac
- Best Hacking Tools 2020
- Hacking Tools Kit
- Hacking Tools For Windows 7
- Computer Hacker
- Tools 4 Hack
- What Are Hacking Tools
- Hack Rom Tools
- Wifi Hacker Tools For Windows
- Android Hack Tools Github
- Hacker Tools Apk Download
- Pentest Tools Website
- Hacking Tools For Windows
- Wifi Hacker Tools For Windows
- Pentest Recon Tools
- Pentest Tools Nmap
- Hackers Toolbox
- Hacking Tools Kit
- Blackhat Hacker Tools
- Hacking Tools For Games
- Hacker Tools Free Download
- Hacker Tools Github
- Pentest Tools Subdomain
- Hacker Tools Apk
- Hacker Tools 2020
- Hacking Tools Free Download
- Hacking Tools And Software
- Pentest Tools Online
- Nsa Hack Tools
- Hacker Tools For Ios
- New Hack Tools
- Hacking Tools And Software
- Computer Hacker
- Pentest Reporting Tools
- Pentest Tools Review
- Computer Hacker
- Hacker Tools Mac
- Hacker Tools Linux
- Best Pentesting Tools 2018
- Pentest Tools Android
- Hack Tools For Pc
- New Hack Tools
- Pentest Tools Port Scanner
- Hacker Hardware Tools
- Hacker Tools 2019
- Hacker Tools
- Hacker Tools 2019
- Pentest Tools Download
- Hacking Tools Name
- Pentest Tools Windows
- Hacking Tools Pc
- Hacks And Tools
- Hacking Tools Windows
- Nsa Hacker Tools
- Pentest Tools For Windows
- World No 1 Hacker Software
- Hacking Tools Hardware
- Hacking Tools 2019
- Hacker Tools Free Download
- Hacking Tools Software
- Hak5 Tools
- Hack And Tools
- Pentest Tools For Windows
- Hacking Tools For Windows Free Download
- Hack Tools Online
- Bluetooth Hacking Tools Kali
- Tools For Hacker
- Hacking Tools For Beginners
- Pentest Recon Tools
- Pentest Tools Android
- Pentest Tools Download
- Hacking Tools Hardware
- Game Hacking
- Beginner Hacker Tools
- Pentest Tools For Android
- Pentest Tools Open Source
- Hack Website Online Tool
- Pentest Tools Linux
- Hacking Tools For Pc
- Wifi Hacker Tools For Windows
- Pentest Tools Android
- Hacking Tools For Windows Free Download
- Termux Hacking Tools 2019
- Hacker Tools 2019
- Hacker Tools Free
- Hacking Tools Online
- Hacking Tools Github
- Pentest Tools Url Fuzzer
- Hacker
- New Hacker Tools
- Hack Tools 2019
- Hacking Tools Online
- Hack Tools 2019
- Blackhat Hacker Tools
- Hacking Tools For Kali Linux
- Android Hack Tools Github
- Hacking Tools Download
- Hack Tools Pc
- Hack Tools
- Hacking App
- Beginner Hacker Tools
No comments:
Post a Comment