Skip to content

Commit

Permalink
+DiscerningFinch
Browse files Browse the repository at this point in the history
  • Loading branch information
FuzzySecurity authored Sep 21, 2020
1 parent 5dcea95 commit 39cf2ef
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -482,7 +482,7 @@ C:\> VirtToPhys.exe -u

### DiscerningFinch

DiscerningFinch is ... discerning! FinchGen lets you create an encrypted templated which you can copy/paste into DiscerningFinch. At runtime DiscerningFinch collects an array of OS specific string constants and then attempts to use those to brute-force decrypt the inner binary. If it succeeds it loads the inner binary into memory passing along any command line arguments that may exists. If it fails, it prints out a .NET-looking error message as feedback. Take note that the .NET version of the inner binary should be the same as that of DiscerningFinch, compile accordingly.
DiscerningFinch is ... discerning! FinchGen lets you create an encrypted templated which you can copy/paste into DiscerningFinch. At runtime DiscerningFinch collects [an array of OS specific string constants](https://github.com/FuzzySecurity/Sharp-Suite/blob/master/DiscerningFinch/DiscerningFinch/DiscerningFinch/Helper.cs#L15) and then attempts to use those to brute-force decrypt the inner binary. If it succeeds it loads the inner binary into memory passing along any command line arguments that may exists. If it fails, it prints out a .NET-looking error message as feedback. Take note that the .NET version of the inner binary should be the same as that of DiscerningFinch, compile accordingly.

```
C:\> FinchGen.exe -p C:\Some\Path\netApp.exe -k "NVIDIA Corporation" -o C:\Some\Path\keyed_template.cs
Expand Down Expand Up @@ -585,4 +585,4 @@ C:\> SystemProcessAndThreadsInformation.exe -p 4508
|-> State: Wait, ContextSwitches: 30
[...Snipped...]
```
```

0 comments on commit 39cf2ef

Please sign in to comment.