Tag: sleep obfuscation technique

  • Shelter: ROP-based sleep obfuscation to evade memory scanners

    Shelter: ROP-based sleep obfuscation to evade memory scanners

    Shelter Shelter is a completely weaponized sleep obfuscation technique that allows you to fully encrypt your in-memory payload making extensive use of ROP. This crate comes with the following characteristics: AES-128 encryption. Whole PE encryption capability. Removal of execution permission during sleep time. No APC/HWBP/Timers were used, exclusive use of ROP to achieve the obfuscation.…