Fast Emulator For Shellcodes In Rust
I have developed a fast emulator for modern shellcodes, that perform huge loops of millions of instructions emulated for resolving API or for other stuff.
The emulator is in Rust and all the few dependencies as well, so the rust safety is good for emulating malware.
There are shellcodes that can be emulated from the beginning to the end, but when this is not possible the tool has many features that can be used like a console, a memory tracing, register tracing, and so on.
https://github.com/sha0coder/scemu
In less than two seconds we have emulated 7 millions of instructions arriving to the recv.
At this point we have some IOC like the ip:port where it's connecting and other details.
Lets see what happens after the recv() spawning a console at position: 7,012,204
target/release/scemu -f shellcodes/shikata.bin -vv -c 7012204
The "ret" instruction is going to jump to the buffer read with recv() so is a kind of stager.
The option "-e" or "--endpoint" is not ready for now, but it will allow to proxy the calls to get the next stage automatically, but for now we have the details to get the stage.
SCEMU also identify all the Linux syscalls for 32bits shellcodes:
The encoder used in shellgen is also supported https://github.com/MarioVilas/shellgen
Let's check with cobalt-strike:
In verbose mode we could do several greps to see the calls and correlate with ghidra/ida/radare or for example grep the branches to study the emulation flow.
target/release/scemu -f shellcodes/rshell_sgn.bin -vv | grep j
target/release/scemu -f shellcodes/rshell_sgn.bin -vv -c 44000 -l
Related posts
- Termux Hacking Tools 2019
- Hack Rom Tools
- Pentest Tools List
- Pentest Tools Alternative
- Pentest Tools Github
- Pentest Tools For Android
- Hacker Tool Kit
- Hacking Tools Software
- Hack Rom Tools
- How To Hack
- Pentest Tools For Mac
- Pentest Tools Nmap
- Pentest Tools For Mac
- Hack Tool Apk
- Pentest Tools Alternative
- Hack And Tools
- How To Make Hacking Tools
- Hacker Tools Free Download
- Growth Hacker Tools
- Beginner Hacker Tools
- Pentest Tools Kali Linux
- Hacking Apps
- Best Pentesting Tools 2018
- Hacking Tools Online
- Hack Tools For Windows
- Pentest Tools
- Hack Tools Github
- Top Pentest Tools
- Hack Tools
- Hacking Tools For Games
- Hacker Security Tools
- Pentest Tools Framework
- Hacker Tools 2020
- Hackers Toolbox
- Hacking Tools Download
- Best Hacking Tools 2019
- Hacker Tools Linux
- Hacking Tools For Games
- Pentest Tools Online
- Underground Hacker Sites
- How To Make Hacking Tools
- Hack Tools For Windows
- Pentest Tools Android
- Pentest Recon Tools
- Hacking Tools For Beginners
- Kik Hack Tools
- How To Install Pentest Tools In Ubuntu
- Hacking Tools For Kali Linux
- Android Hack Tools Github
- Termux Hacking Tools 2019
- Pentest Tools Apk
- Tools Used For Hacking
- Hacking Tools For Beginners
- Pentest Tools Open Source
- Hacker Tools For Windows
- Hack Tools For Windows
- Pentest Automation Tools
- Hackers Toolbox
- Physical Pentest Tools
- Hacker Tools For Mac
- Hack Tools Pc
- Pentest Tools Windows
- Pentest Tools For Mac
- Hacking Tools For Beginners
- Pentest Tools Url Fuzzer
- Blackhat Hacker Tools
- Hack Website Online Tool
- Best Pentesting Tools 2018
- New Hack Tools
- Black Hat Hacker Tools
- Hacker Tools Free
- Hak5 Tools
- Hacker Tools List
- Pentest Tools Url Fuzzer
- Hacking Tools 2020
- Hack Apps
- Black Hat Hacker Tools
- Pentest Tools Download
- Hacking Tools Software
- Hack Tools For Pc
- Computer Hacker
- Hack Tools Download
- Pentest Tools For Ubuntu
- Hacking Tools Github
- Easy Hack Tools
- How To Hack
- Hacking Tools Usb
- Hacking Tools Pc
- Hak5 Tools
- Top Pentest Tools
- Hack App
- Hacking Tools Hardware
- Hack Tools Mac
- How To Make Hacking Tools
- Hacker Tools 2019
- Wifi Hacker Tools For Windows
- Hacking Tools Name
0 Comments:
Post a Comment
<< Home