https://github.com/matheuzsecurity/nullsection
NullSection is an Anti-Reversing tool that applies a technique that overwrites the section header with nullbytes.
https://github.com/matheuzsecurity/nullsection
Last synced: 10 months ago
JSON representation
NullSection is an Anti-Reversing tool that applies a technique that overwrites the section header with nullbytes.
- Host: GitHub
- URL: https://github.com/matheuzsecurity/nullsection
- Owner: MatheuZSecurity
- Created: 2023-07-26T14:39:15.000Z (almost 3 years ago)
- Default Branch: main
- Last Pushed: 2024-01-20T21:56:48.000Z (over 2 years ago)
- Last Synced: 2024-11-17T05:36:25.733Z (over 1 year ago)
- Language: C
- Size: 4.88 KB
- Stars: 62
- Watchers: 4
- Forks: 4
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# NullSection
NullSection is an Anti-Reversing tool that applies a technique that overwrites the section header with nullbytes.
### Install
```
git clone https://github.com/MatheuZSecurity/NullSection
cd NullSection
gcc nullsection.c -o nullsection
./nullsection
```
### Advantage
When running nullsection on any ELF, it could be .ko rootkit, after that if you use Ghidra/IDA to parse ELF functions, nothing will appear no function to parse in the decompiler for example, even if you run readelf -S / path /to/ elf the following message will appear "There are no sections in this file."
Make good use of the tool!
#### Note
```
We are not responsible for any damage caused by this tool, use the tool intelligently and for educational purposes only.
```