神兵利器 - Shellcode 加解密脚本
2022-10-31 08:32:47 Author: 天驿安全(查看原文) 阅读量:17 收藏

安装

git clone https://github.com/blacknbunny/Shellcode-Encrypter-Decrypter.git && cd Shellcode-Encrypter-Decrypter/python encdecshellcode.py --help

示例

Encryption:
python encdecshellcode.py --shellcode \x41\x41\x42\x42 --key SECRETKEY --option encrypt
Decryption:
python encdecshellcode.py --shellcode \x41\x41\x42\x42 --key SECRETKEY --option decrypt

各种shellcode

http://shell-storm.org/shellcode/

import argparsefrom sys import argv, stdout, exit
parser = argparse.ArgumentParser(description="Encrypting & Decrypting Shellcode")parser.add_argument('-s', '--shellcode', help='Shellcode To Encrypt & Decrypt')parser.add_argument('-k', '--key', help='Key Of The Shellcode To Encrypt & Decrpyt', default='key')parser.add_argument('-o', '--option', help='Argument For Encrypting or Decrypting The Shellcode')
args = parser.parse_args()
def EncryptShellcode(shellcode, key):
shellcode_encrypted_hex = [] shellcode_decrypted_hex = [] shellcode_replaced_hex = ''

count = 0 for d in range(0, len(shellcode) / 4): count += 4 shellcode_decrypted_hex.append(shellcode[count-4:count].replace(r'\x', ''))
for x in range(0, len(shellcode_decrypted_hex)): for d in range(0, len(key)): shellcode_encrypted_hex.append(hex(ord(shellcode_decrypted_hex[x].decode('hex')) ^ ord(key[d])))
for y in range(0, len(shellcode_encrypted_hex)): shellcode_replaced_hex += shellcode_encrypted_hex[y].replace('0x', r'\x')
return shellcode_replaced_hex
def DecryptShellcode(shellcode, key): shellcode_decrypted = [] shellcode_xor_headers = []
shellcode_replaced_hex = '' string = ''
for x in shellcode: string += shellcode.replace(r'\x', '') break
count = 0 for y in string: shellcode_xor_headers.append(string[count:count+2]) count += 6
while '' in shellcode_xor_headers: shellcode_xor_headers.remove('')

for z in range(len(shellcode_xor_headers)): shellcode_decrypted.append(hex(ord(shellcode_xor_headers[z].decode('hex')) ^ ord(key[0])))
for h in range(0, len(shellcode_decrypted)): shellcode_replaced_hex += shellcode_decrypted[h].replace('0x', r'\x')
return shellcode_replaced_hexdef PrintHelp(): parser.print_help() exit(1)
def main(): try: shellcode = args.shellcode key = args.key if args.option == "encrypt": print( "Encrypted Shellcode = " + EncryptShellcode(shellcode, key) ) elif args.option == "decrypt": print( "\nDecrypted Shellcode = " + DecryptShellcode(shellcode, key) ) else: PrintHelp() except Exception as e: PrintHelp() print(e)
if __name__ == '__main__': exit(main())

项目地址:https://github.com/blacknbunny/encdecshellcode


文章来源: http://mp.weixin.qq.com/s?__biz=MzkxNjIxNDQyMQ==&mid=2247493268&idx=1&sn=e0fce8a6ea6a764d35a48982b6490c20&chksm=c151e16ef6266878cfe51378a17ffa4fb18e962ee7fe6ff350cafb3e6dcf43c9dad9056d4278#rd
如有侵权请联系:admin#unsafe.sh