Commit Graph

108 Commits

Author SHA1 Message Date
Diego Ledda b18611c1d9 Merge pull request #20966 from litemars/add_Linux_evasion_module-rc4_packer_x64
adding RC4 packer x64, rc4 decrypt routine and sleep evasion routine
2026-03-09 10:55:44 -04:00
Diego Ledda 38dbefecfc Merge pull request #20965 from litemars/add_Linux_evasion_module-rc4_packer_x86
adding RC4 packer x86, rc4 decrypt routine and sleep evasion routine
2026-03-03 04:36:51 -05:00
litemars cdd66793bf updating the sleep evasion and the rc4_decrypter for x64 2026-02-20 17:53:24 +01:00
litemars a377cfd0e3 updating rc4 decrypter and sleep evasion with Metasm 2026-02-20 17:40:18 +01:00
litemars ecbe73609b updating the sleep module and the rc4_decrypter for aarch64 2026-02-20 17:19:50 +01:00
litemars 438e3a23b4 Update lib/msf/core/payload/linux/aarch64/sleep_evasion.rb
Co-authored-by: Diego Ledda <diego_ledda@rapid7.com>
2026-02-17 22:09:36 +01:00
litemars 9fc17fbee4 updating x86 rc4 packer to use Metasm 2026-02-13 16:12:56 +01:00
litemars 02d31dfbcb changing jmp/call/pop instructions 2026-02-13 14:34:41 +01:00
litemars bfbc408617 updating x64 rc4 packer to use Metasm 2026-02-13 13:49:30 +01:00
litemars 0fc864f23d Update lib/msf/core/payload/linux/aarch64/rc4_decrypter.rb
Co-authored-by: Diego Ledda <diego_ledda@rapid7.com>
2026-02-13 11:27:46 +01:00
litemars 9610cdb2a4 add x64 rc4 packer, sleep evasion routine and rc4 decrypter 2026-02-12 16:45:26 +01:00
litemars 1feb58cce8 add x86 rc4 packer, sleep evasion and rc4 decrypter 2026-02-12 16:38:14 +01:00
litemars 146b5dd3fd adding RC4 packer arm64, rc4 decrypt routine and sleep evasion routine 2026-02-12 16:24:54 +01:00
dledda-r7 b42fc2eb1e fix: remove armbe, ppc, ppc64le, ppce500v2 and zarch elf_loaders 2026-01-06 09:53:04 -05:00
Diego Ledda a4cb822d13 Update lib/msf/core/payload/linux/aarch64/elf_loader.rb 2026-01-06 09:52:28 -05:00
dledda-r7 ed87ffeb66 fix: rollback itoa and execve instead of execveat 2026-01-06 09:52:28 -05:00
Diego Ledda 91bb23f41d Update lib/msf/core/payload/linux/aarch64/elf_loader.rb
fix aarch64 packing
2026-01-06 09:52:27 -05:00
Martin Sutovsky 8ab2f4450f Rolling back zarch to exec syscall 2026-01-06 09:52:27 -05:00
Martin Sutovsky 70ad726dd6 Rolling back ppc/ppc64/ppce500v2 to exec syscall 2026-01-06 09:52:26 -05:00
Martin Sutovsky ad44f7c637 Rolling back arm/arm64 to exec syscall 2026-01-06 09:52:26 -05:00
dledda-r7 17776b6377 fix: fix linux prepends, uniform ppc prepends 2026-01-06 09:52:26 -05:00
dledda-r7 d2a2d1e1c8 fix: removed + character in PayloadLinuxMinKernel 2026-01-06 09:52:20 -05:00
Diego Ledda d157779b72 Update lib/msf/core/payload/linux/mipsbe/prepends.rb
Co-authored-by: Brendan <bwatters@rapid7.com>
2026-01-06 09:51:54 -05:00
Martin Sutovsky 34318f81b6 Fixing mipsbe loader stub 2026-01-06 09:51:53 -05:00
dledda-r7 187a7d361a fix: changes based on review comments 2026-01-06 09:51:51 -05:00
Martin Sutovsky f29d7aeea0 Fixed comments 2026-01-06 09:51:29 -05:00
Martin Sutovsky f391e1dda2 Adds convetion for each architecture 2026-01-06 09:51:29 -05:00
dledda-r7 58a32627c0 chore: linting meterpreter_loader and prepends 2026-01-06 09:51:28 -05:00
dledda-r7 0fd1bd8047 fix: updating MeterpreterLinuxMinKernel default value, displaying warning on prepends usage 2026-01-06 09:51:28 -05:00
dledda-r7 75765fb0eb fix: including prepends mixin on linux stageless meterpreter 2026-01-06 09:51:26 -05:00
dledda-r7 cd0645b502 fix: changing MeterpreterLegacyElf to MeterpreterLinuxMinKernel 2026-01-06 09:51:02 -05:00
Martin Sutovsky 98e974dfea Adds comments for zarch 2026-01-06 09:50:38 -05:00
Martin Sutovsky d93c9af7b0 Adds comments for ARM, Mips and PPC 2026-01-06 09:50:37 -05:00
Martin Sutovsky 351db91769 Adds execveat for MIPS64, PPC64 and Zarch 2026-01-06 09:50:08 -05:00
Martin Sutovsky 34aeb6fc89 Uses execveat syscall to make loader stub smaller 2026-01-06 09:50:07 -05:00
Martin Sutovsky 768331d234 Adding comments for PPC 2026-01-06 09:50:06 -05:00
Martin Sutovsky eb68c8d93c Add armbe/armle comments 2026-01-06 09:49:33 -05:00
Martin Sutovsky 85091a4111 Aarch64 comments 2026-01-06 09:49:33 -05:00
Martin Sutovsky 16437e7421 Fixed missing payload length for AARCH64 2026-01-06 09:49:32 -05:00
dledda-r7 753b80322f fix: updated mettle payload generation and cached_size 2026-01-06 09:49:30 -05:00
dledda-r7 0cc080fbe9 fix: updated mettle payload generation and cached_size 2026-01-06 09:49:00 -05:00
dledda-r7 978a2c23a5 fix: improved x86 and x64 shellcodes 2026-01-06 09:48:27 -05:00
Martin Sutovsky 679ebb070b Code refactor, loader delivery update 2026-01-06 09:48:24 -05:00
Martin Sutovsky 7c77a9cfc7 ARMBe and Zarch stageless payload 2026-01-06 09:47:55 -05:00
dledda-r7 3f2be78f9b feat: add mips64 elf template and meterpreter_loader 2026-01-06 09:47:54 -05:00
dledda-r7 71d2eb2046 fix: move mipsbe and mipsle meterpreter_loader into separate mixin 2026-01-06 09:46:08 -05:00
dledda-r7 6d750fef07 fix: move x64 meterpreter_loader into separate mixin 2026-01-06 09:46:07 -05:00
dledda-r7 38cd623b63 fix: move meterpreter_loader into separate mixin 2026-01-06 09:46:07 -05:00
bcoles a5e3a5ea85 Add Linux RISC-V 32-bit/64-bit prepends 2025-11-21 23:55:05 +11:00
bcoles eff40ba207 Msf::Payload::Linux::Prepends: Fix AppendExit description 2025-11-20 18:30:44 +11:00