{"id":21049547,"url":"https://github.com/Genetic-Malware/Ebowla","last_synced_at":"2025-05-15T20:31:51.819Z","repository":{"id":46241693,"uuid":"55732417","full_name":"Genetic-Malware/Ebowla","owner":"Genetic-Malware","description":"Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)","archived":false,"fork":false,"pushed_at":"2019-01-28T10:45:15.000Z","size":36307,"stargazers_count":737,"open_issues_count":10,"forks_count":167,"subscribers_count":56,"default_branch":"master","last_synced_at":"2024-11-03T04:32:41.552Z","etag":null,"topics":["clueless-agents","golang","memorymodule","powershell","python"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Genetic-Malware.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2016-04-07T22:29:58.000Z","updated_at":"2024-10-31T15:18:24.000Z","dependencies_parsed_at":"2022-09-16T12:11:30.744Z","dependency_job_id":null,"html_url":"https://github.com/Genetic-Malware/Ebowla","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Genetic-Malware%2FEbowla","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Genetic-Malware%2FEbowla/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Genetic-Malware%2FEbowla/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Genetic-Malware%2FEbowla/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Genetic-Malware","download_url":"https://codeload.github.com/Genetic-Malware/Ebowla/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225375092,"owners_count":17464425,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["clueless-agents","golang","memorymodule","powershell","python"],"created_at":"2024-11-19T15:12:25.037Z","updated_at":"2024-11-19T15:12:29.828Z","avatar_url":"https://github.com/Genetic-Malware.png","language":"Python","funding_links":[],"categories":["tools","[↑](#-content) 🛠️ Tools"],"sub_categories":["Tools"],"readme":"# NO LONGER SUPPORTED\n\n# EBOWLA\n\n```\nUSAGE: ./ebowla.py exe_dll_shellcode genetic.config\n\nThen: Compile your code\n```\n\n### Known Issues\n\nThe current version is locked into golang version \u003c= 1.9.5 known working on golang 1.6: https://github.com/Genetic-Malware/Ebowla/issues/23\n\nIf someone wants to update the codebase to support LDFlags for golang 1.9+ we accept pull requests!\n\n\nMSF x86 EXE file output not compatible with MemoryModule (use DLL or x64 EXE/DLL)\nhttps://github.com/Genetic-Malware/Ebowla/issues/12\n\nPowershell output was tested on powershellv5\n\n\n### Presentation Resources\n\nSlides:\n\nInfiltrate 2016: https://github.com/Genetic-Malware/Ebowla/raw/master/Infiltrate_2016_Morrow_Pitts_Genetic_Malware.pdf\n\nEkoparty 2016: https://github.com/Genetic-Malware/Ebowla/blob/master/Eko_2016_Morrow_Pitts_Master.pdf\n\nDemos:\n\nDemo1:\nhttps://www.youtube.com/watch?v=rRm3O7w5GHg\n\nDemo2:\nhttps://youtu.be/Bu_qDrbX9Zo\n\nDemo3:\nhttps://youtu.be/mlh70LtwmDo\n\nDemo4 (PowerShell):\nhttps://youtu.be/lyedtAtATGc\n\n\n### Contact:\n```\n  twitter:\n    @wired33\n    @midnite_runr\n    \n```\n\n# Documentation\n\n```\n  https://github.com/Genetic-Malware/Ebowla/blob/master/documentation.md\n  \n  Also read genetic.config\n\n```\n\n# Payload Support\n\n|Payload|Python|GO|PowerShell(tested on v5)\n|:-----|:-----|:----|:----|\n|Reflective DLL| x32 / x64 - None| x32 / x64 - In Memory| x32 / x64 - In Memory|\n|DLL| x32 / x64 - None| x32 / x64 - In Memory| x32 / x64 - In Memory|\n|EXE| x32 / x64 - On Disk| x32 / x64 - In Memory| x32 / x64 - In Memory|\n|Shell Code| x32 / x64 - In Memory| x32 / x64 - In Memory|  x32 / x64 - In Memory|\n|Python Code| x32 / x64 - In Memory| x32 / x64 - None| None|\n|Powershell code|None|None|Yes|\n|File Drop| Yes | In Progress | Yes |\n### Credits\n\nhttps://github.com/vyrus001/go-mimikatz\n\nhttps://github.com/PowerShellMafia/PowerSploit/blob/master/CodeExecution/Invoke-ReflectivePEInjection.ps1\n\nhttps://github.com/PowerShellMafia/PowerSploit/blob/master/CodeExecution/Invoke-Shellcode.ps1\n\n\n### Contributing\n\nIf you have a bug report, submit an issue.  Include the OS that you tested everything on, including the server (victim).\n\nOutput of commands we like:\n```\nWindows:\n  systeminfo\n  \nLinux:\n  uname -a\n  \n```\n\nIf you want to contribute code please do so.  We ask that you actually submit something substantial, fixing spacing doesn't count, or making our code fully pep8.  \n\nLook at our issues for ideas where you can help: https://github.com/Genetic-Malware/Ebowla/issues\n\nsecretsquirrel is on IRC #freenode as midnite_runr\n\n\n### Contributors\n\nhttps://github.com/wired33 (wrote most of the golang payload code)\n\nhttps://github.com/secretsquirrel (wrote the python payload code and most of the encryption code)\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FGenetic-Malware%2FEbowla","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FGenetic-Malware%2FEbowla","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FGenetic-Malware%2FEbowla/lists"}