Shelter

Shelter Shelter is a completely weaponized sleep obfuscation technique that allows to fully encrypt your in-memory payload making an extensive use of ROP. This crate comes with the following characteristics: AES-128 encryption. Whole PE encryption capability. Removal of execution permission durin...

Ekko

Ekko A small sleep obfuscation technique that uses CreateTimerQueueTimer Win32 API. Proof of Concept. Can be done better. NOTE This implementation has known flawes. So I wouldn't recommend using it without knowing how it works or know how to spot and fix those flaws. TLDR: don't copy and past it...

TickTock

TickTock This repository demonstrates a PoC memory scanner for enumerating timer-queue timers as used in Ekko Sleep Obfuscation: https://github.com/Cracked5pider/Ekko. For a full technical walkthrough please see the accompanying blog post here:...

D1rkSleep

D1rkSleep @5pider 的 EKKO 改进版本，仅加密映像节区。 使用 CreateTimerQueueTimer Win32 API 的睡眠混淆技术。 致谢： https://github.com/Cracked5pider/Ekko...