{"id":17383332,"url":"https://github.com/black-hell-team/thebhtinjector","last_synced_at":"2025-08-08T18:50:41.063Z","repository":{"id":241961062,"uuid":"808318052","full_name":"Black-Hell-Team/TheBhTiNjector","owner":"Black-Hell-Team","description":"TheBhTiNjector is a filebinder that can concatenate two or more files of some extensions that preserves the integrity of the files and gives you the option of injecting shellcode into them.","archived":false,"fork":false,"pushed_at":"2024-10-10T17:14:45.000Z","size":378,"stargazers_count":11,"open_issues_count":0,"forks_count":3,"subscribers_count":0,"default_branch":"main","last_synced_at":"2025-03-28T18:21:20.654Z","etag":null,"topics":["binder","cpp","file-binder","file-binding","hides-malware","malware","malware-analysis","malware-sample","malware-samples","ransomware","ransomware-builder","ransomware-source-code","remote-access-tool","remote-administration-tool","shellcode","shellcode-injector","trojan","trojan-builder","trojan-rat"],"latest_commit_sha":null,"homepage":"","language":"Assembly","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Black-Hell-Team.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-05-30T20:22:38.000Z","updated_at":"2025-01-20T10:28:15.000Z","dependencies_parsed_at":"2024-10-16T07:41:20.718Z","dependency_job_id":null,"html_url":"https://github.com/Black-Hell-Team/TheBhTiNjector","commit_stats":null,"previous_names":["black-hell-team/bhfilebinder","black-hell-team/bhtfilebinder","black-hell-team/thebhtinjector"],"tags_count":1,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Black-Hell-Team%2FTheBhTiNjector","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Black-Hell-Team%2FTheBhTiNjector/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Black-Hell-Team%2FTheBhTiNjector/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Black-Hell-Team%2FTheBhTiNjector/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Black-Hell-Team","download_url":"https://codeload.github.com/Black-Hell-Team/TheBhTiNjector/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":249026734,"owners_count":21200499,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["binder","cpp","file-binder","file-binding","hides-malware","malware","malware-analysis","malware-sample","malware-samples","ransomware","ransomware-builder","ransomware-source-code","remote-access-tool","remote-administration-tool","shellcode","shellcode-injector","trojan","trojan-builder","trojan-rat"],"created_at":"2024-10-16T07:41:18.518Z","updated_at":"2025-04-15T07:31:09.672Z","avatar_url":"https://github.com/Black-Hell-Team.png","language":"Assembly","funding_links":[],"categories":[],"sub_categories":[],"readme":"# TheBhTiNjector \u003cimg img src=\"https://media.giphy.com/media/12oufCB0MyZ1Go/giphy.gif\" width=\"50\"\u003e![C++](https://img.shields.io/badge/c++-%2300599C.svg?style=for-the-badge\u0026logo=c%2B%2B\u0026logoColor=white) [![GitHub followers](https://img.shields.io/github/followers/BrunoCiccarino?label=Follow\u0026style=social)](https://github.com/BrunoCiccarino)\nTheBhTiNjector is a file binder that concatenates files while preserving their functionality.\n\n## And how does it work?\nBasically, it concatenates multiple types of files, which can be executables, images or executables with images, uniting them and having the possibility of injecting shellcode.\n\n## What is shellcode?\nThe shortest definition is, a shellcode is a small piece of code used as a payload in exploiting a software vulnerability. And what does it mean? Shellcode is defined as a set of instructions injected and then executed by an exploit. Shellcode is used to directly manipulate the registries and functionality of an exploit, and can even secure a shell on the target machine. For the shellcode to work correctly, you need to pay attention to these aspects:\n\n-- Shellcode Size: The shellcode size cannot exceed the available space in the image, resulting in improper injection.\n\n-- Shellcode Format: The shellcode may not be formatted correctly to run on the target architecture. Make sure the shellcode is compatible with the architecture of the system where the image will run.\n\n-- Poor Testing: If you are not seeing the expected behavior when opening the image, it is possible that your testing is incomplete or inadequate. Make sure you are testing in a suitable environment and that you are observing the results correctly.\n\n## And how do I use it?\nFirst you compile the shellcode, enter the shellcodes directory with ```cd shellcodes```, after entering you can compile them (this may vary depending on your machine) for example: \n\n```nasm -f elf32 -o shellcode.o shellcodeWin.asm```\n   \n```ld -m elf_i386 -o shellcode shellcode.o```\n\nor: \n\n```nasm -f win32 shellcodeWin.asm -o shellcode.obj```\n\nThen you move the compiled shellcodes to the main directory.\n\nThen, you compile the main code with your preferred compiler, in this case I will use G++ for example: ```g++ -o main.exe main.cpp```\n\nAfter you compile, you can run for example: ```./main.exe -h``` which will give you all the options of what to do and how to do it.\n\n\u003cimg src=\"img/banner3.jpg\"\u003e\n\n## running the script\nAfter that, you can concatenate the files and inject the shellcode, as in this example:\n\n\u003cimg src=\"img/runningscript.jpg\"\u003e\n\nYou can also concatenate binary with binary, as in this example:\n\n\u003cimg src=\"img/skip.png\"\u003e\n\nYou can also inject shellcode into binaries\n\n\u003cimg src=\"img/bintobin.png\"\u003e\n\n## How do I contribute to this project?\nTo contribute to this project you need to make a pull request, and then give us a detailed description of what you want to add or change and we at the black hell team will review the code and authorize it, sometimes editing the implementation a little to maintain good programming practices.\n\n## License\n\u003cimg src=\"https://img.shields.io/badge/License-MIT-blue?color=blue\u0026style=for-the-badge\" alt=\"License\" /\u003e\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fblack-hell-team%2Fthebhtinjector","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fblack-hell-team%2Fthebhtinjector","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fblack-hell-team%2Fthebhtinjector/lists"}