SpookFlare has a different perspective to bypass security measures and it gives you the opportunity to bypass the endpoint countermeasures at the client-side detection and network-side detection. SpookFlare is a loader generator for Meterpreter Reverse HTTP and HTTPS stages. SpookFlare has custom encrypter with string obfuscation and run-time code compilation features so you can bypass the countermeasures of the target systems like a boss until they “learn” the technique and behavior of SpookFlare payloads.
- Obfuscation
- Runtime Code Compiling
- Source Code Encryption
- Patched Meterpreter Stage Support
___ ___ ___ ___ _ __ ___ _ _ ___ ___
/ __| _ \/ _ \ / _ \| |/ / | __| | /_\ | _ \ __|
\__ \ _/ (_) | (_) | ' < | _|| |__ / _ \| / _|
|___/_| \___/ \___/|_|\_\ |_| |____/_/ \_\_|_\___|
Version : 1.0
Author : Halil Dalabasmaz
WWW : artofpwn.com
Twitter : @hlldz
Github : @hlldz
Licence : Apache License 2.0
Note : Stay in shadows!
-------------------------------------------------------
[*] You can use "help" command for access help section.
spookflare > help
list : List payloads
generate : Generate payloads
exit : Exit from program
[!] Important: Use x86 listener for x86 payloads and x64 listener for x64 payloads otherwise the process will crash!
spookflare > list
SpookFlare can generate following payloads.
[*] Meterpreter Loader (.EXE) with Custom Encrypter and Custom Stub:
- Meterpreter Reverse HTTP x86/x64
- Meterpreter Reverse HTTPS x86/x64
https://artofpwn.com/spookflare.html
https://www.youtube.com/watch?v=p_eKKVoEl0o
I developed the SpookFlare and technique for use in penetration tests, red team engagements and it is purely educational. Please use with responsibility.
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent