Advanced payload obfuscation techniques, some of which are being used in the wild, such as in Hive ransomware.
Reason to use this tools, to evade windows defender staticly using shellcode obfuscation techniques.
Fogshell Supports 3 types of obfuscated shellcode output, all as arrays:
-
Ipv4Fuscation: Output The Shellcode As A Array Of ipv4 Addresses [Example: 252.72.131.228]
-
Ipv6Fuscation: Output The Shellcode As A Array Of ipv6 Addresses [Example: FC48:83E4:F0E8:C000:0000:4151:4150:5251]
-
UuidFuscation: Output The Shellcode As A Array Of alphanumeric string [Example: E48348FC-E8F0-00C0-0000-415141505251]
-
Running The binary as it is, will output the help screen, from there it is so easy to use, i added 3 other projects, to demonstrate how to call the decoder function.
-
Fogshell will output on the console the shellcode as well the SizeofShellcode and NumberofElements needed for decryption.
Note: The projects should be compiled in release mode. Compiling in debug mode will result in the binary not working correctly.
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent