https://github.com/elfmaster/sherlocked

Universal script packer-- transforms any type of script into a protected ELF executable, encrypted with anti-debugging.
https://github.com/elfmaster/sherlocked

Last synced: 2 months ago
JSON representation

Universal script packer-- transforms any type of script into a protected ELF executable, encrypted with anti-debugging.

• Host: GitHub
• URL: https://github.com/elfmaster/sherlocked
• Owner: elfmaster
• Created: 2014-10-30T22:02:19.000Z (about 10 years ago)
• Default Branch: master
• Last Pushed: 2014-10-30T22:03:18.000Z (about 10 years ago)
• Last Synced: 2024-08-03T14:09:51.712Z (6 months ago)
• Language: Objective-C
• Size: 695 KB
• Stars: 103
• Watchers: 12
• Forks: 32
• Open Issues: 1
• Metadata Files:
  • Readme: README

Awesome Lists containing this project

• awesome-anti-forensic - Sherlocked - - transforms any type of script into a protected ELF executable, encrypted with anti-debugging. (Tools / Encryption / Obfuscation)

README

        
Sherlocked v3. by [email protected] 2014 from Bitlackeys

About:

Sherlocked is a protector for scripts of any type. It uses a simple xor cipher

with a provided key. Unless '-r' option is used, the key is stored (encrypted)

within the binary and the binary will run without the user providing the key.

Sherlocked takes your script, encrypts it, and stores it in an output ELF x86_64

executable file. The ELF executable at runtime will decrypt the script and

temporarily write it to a random file in /tmp. It passes the script and cmdline

args to the interpreter, and then deletes the script. 

NOTE: Protected files that are also locked with a password (e.g. -r) won't accept

cmdline args. In other words you can't password protect your script and expect it

to take cmdline args. This is a temporary restriction due to my lazy programming

since there is no quick way to seperate the command line args from the password

you would have to give on the command line. If you don't like this, then implement

it yourself :)

Compile:

make

Usage:

./sherlocked     [-r]

Options:

 	<-> The script file

 	<-> The protected output file

		<-> The key string used to encrypt the script

[-r] 		<-> Require the user who runs the protected executable supplies the key for it to run I.E ./script.elf