Skip to content

Commit e8f7e57

Browse files
author
Wintrmvte
committed
Added examples section
1 parent 954a72f commit e8f7e57

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

README.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -30,6 +30,14 @@ The framework's source is divided into 16 separate sections - each of them provi
3030
* [ 0x15 ] --- > Disablers (security measures, ASLR, process inspection)
3131
* [ < * > ] --- > Experimental code (network/signal-based c2 channels, process protection, signal throwback)
3232

33+
## Examples
34+
`cmd_exec.asm` - Checks for elevated privilleges. If present, a command is executed in background and the machine is rebooted afterwards.
35+
36+
`timed_stager.asm` - A program with operational time of 5 minutes attempts to download a remote file and execute it in memory. A TCP reconnection in case of failure is performed in background every 20 seconds, infinitely.
37+
38+
`reverse_shell.asm` - A reverse shell that removes itself via `argv[0]` unlink, changes it's process priority, elevates privilleges and detaches from current terminal session.
39+
40+
`vm_and_stuff.asm` - A program prepended with 40 nop (`0x90`) instructions, padded with nops until it reaches 256 bytes in size. Only one instance can run simultaneously on host, thanks to `flock(2)`. After checking for VM presence and an attempt to disable ASLR, a TCP-connect pingback payload is launched.
3341
## License
3442
This software is under [MIT License](https://en.wikipedia.org/wiki/MIT_License)
3543

0 commit comments

Comments
 (0)