Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
safe6Sec authored Sep 18, 2021
1 parent 24ff8c2 commit 7f58830
Showing 1 changed file with 7 additions and 5 deletions.
12 changes: 7 additions & 5 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,9 @@
# GolangBypassAV
研究利用golang来bypassAV


![GolangBypassAV](https://socialify.git.ci/safe6Sec/GolangBypassAV/image?description=1&font=Inter&forks=1&issues=1&language=1&owner=1&pattern=Plus&stargazers=1&theme=Light)

研究利用golang来bypassAV
## 前言
免杀这块本来就不是web狗擅长的,而且作为一个web狗也没必要花太多时间来折腾这个,达到能用就行,不要追求全部免杀,能免杀目标就行。

Expand All @@ -16,8 +19,7 @@
把payload隐写到图片
总之就是各种分离

### 动态
golang和c++有点不一样不需要考虑处理IAT。
### 动态
敏感api越少越好比如注册表操作、添加启动项、添加服务、添加用户、注入、劫持、创建进程、加载DLL等等
核心:
想法设法的把shellcode加载到内存里面。
Expand All @@ -26,7 +28,7 @@ golang和c++有点不一样不需要考虑处理IAT。


## 使用
**只支持windows系统!!!!**
**暂时只支持windows系统编译!!!!**

默认payload位置C:\\Users\\Administrator\\Desktop\\payload.bin
执行下面命令,即可生成免杀(game.exe)
Expand Down Expand Up @@ -87,4 +89,4 @@ https://github.com/Rvn0xsy/BadCode
https://github.com/Airboi/bypass-av-note
https://github.com/brimstone/go-shellcode
https://github.com/timwhitez/Doge-Loader
https://github.com/fcre1938/goShellCodeByPassVT
https://github.com/fcre1938/goShellCodeByPassVT

0 comments on commit 7f58830

Please sign in to comment.