RCO: XOR Params
How it works
XOR params performs an exclusive OR (XOR) operation on each byte of the shellcode with each byte of the key (repeating the key if need be).
Using it
- [Not shown in demo] Generate shellcode for the desired end result (for example, use msfvenom to generate a reverse TCP shell shellcode for the target operating system)
- [Not shown in demo] Open the config file and change the shellcode to the shellcode generated in step 1
- [Not shown in demo] Open the config file and change the key to a desired key
- [Not shown in demo] Compile the executable
- For Linux
cargo build -p xor_params --release
- For Windows
cargo build --target x86_64-pc-windows-gnu -p xor_params --release
- For Linux
- Run the executable
- Open the config file and change encrypted payload to the output of step 5