https://github.com/byt3n33dl3/novaoutcast
NOC is an Integration Bypasser, Change PoC Binary to quirks of working with the LLVM.
https://github.com/byt3n33dl3/novaoutcast
bypass bypassav docker linux macos security windows
Last synced: 3 months ago
JSON representation
NOC is an Integration Bypasser, Change PoC Binary to quirks of working with the LLVM.
- Host: GitHub
- URL: https://github.com/byt3n33dl3/novaoutcast
- Owner: byt3n33dl3
- License: other
- Created: 2024-07-22T08:19:09.000Z (12 months ago)
- Default Branch: main
- Last Pushed: 2024-07-22T09:13:09.000Z (12 months ago)
- Last Synced: 2025-04-06T02:48:50.015Z (3 months ago)
- Topics: bypass, bypassav, docker, linux, macos, security, windows
- Language: C
- Homepage:
- Size: 8.36 MB
- Stars: 12
- Watchers: 1
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
## NovaOutCast | [N.O.C](https://github.com/pxcs/NovaOutCast/)
```python
______
.-" "-.
/ \
| P X x C S |
|, .-. .-. ,|
| )(__/ \__)( |
|/ /\ \|
(@_ (_ ^^ _)
_ ) \_______\__|IIIIII|__/__________________________
(_)@8@8{}<________|-\IIIIII/-|===========================>
)_/ \ /
(@ `--------` CappaX - pxcs - bypassAV
```
# Blog posts
The implementation is rather complex and this domain in software development is rarely documented in layman's terms. This is why there are blog posts which detail every design choice and go over the quirks of working with the LLVM API.
* [here!](https://blog.scrt.ch/2020/06/19/engineering-antivirus-evasion/)
* [here!](https://blog.scrt.ch/2020/07/15/engineering-antivirus-evasion-part-ii/)
## Build
```
docker build . -t novaoutcast
docker run -v ~/dev/scrt/novaoutcast:/home/toto -it novaoutcast bash #adapt ~/dev/scrt/novaoutcast to the path where you cloned novaoutcast
sudo pacman -Syu
mkdir CMakeBuild && cd CMakeBuild
cmake ..
make -j 2
./novaoutcast.bin --help
```
## Usage
For simple programs, this is as easy as:
```
novaoutcast.bin test/strings_simplest.c --strings=true --
```
However, you should know that you're using a compiler frontend, which can only work well if you give it the path to ALL the includes required to build your project. As an example, `test/string_simplest.c` includes headers from the WinSDK, and the script `run_example.sh` shows how to handle such scenarios.
## Common errors
```
CommandLine Error: Option 'non-global-value-max-name-size' registered more than once! LLVM ERROR: inconsistency in registered CommandLine options
```
In case you encounter this error, please use `CMakeLists_archlinux.txt` instead of `CMakeLists.txt` and it should go away.
## Contributors
- Thanks @gituser5555 for the bug fixes.
- **AVCLEARNERS** for source codes