Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/matheuzsecurity/nullsection
NullSection is an Anti-Reversing tool that applies a technique that overwrites the section header with nullbytes.
https://github.com/matheuzsecurity/nullsection
Last synced: about 5 hours ago
JSON representation
NullSection is an Anti-Reversing tool that applies a technique that overwrites the section header with nullbytes.
- Host: GitHub
- URL: https://github.com/matheuzsecurity/nullsection
- Owner: MatheuZSecurity
- Created: 2023-07-26T14:39:15.000Z (over 1 year ago)
- Default Branch: main
- Last Pushed: 2023-07-26T14:41:30.000Z (over 1 year ago)
- Last Synced: 2023-07-26T18:27:45.055Z (over 1 year ago)
- Language: C
- Size: 4.88 KB
- Stars: 1
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# NullSection
NullSection is an Anti-Reversing tool that applies a technique that overwrites the section header with nullbytes.
### Install
```
git clone https://github.com/MatheuZSecurity/NullSection
cd NullSection
gcc nullsection.c -o nullsection
./nullsection
```
### Advantage
When running nullsection on any ELF, it could be .ko rootkit, after that if you use Ghidra/IDA to parse ELF functions, nothing will appear no function to parse in the decompiler for example, even if you run readelf -S / path /to/ elf the following message will appear "There are no sections in this file."
Make good use of the tool!
#### Note
```
We are not responsible for any damage caused by this tool, use the tool intelligently and for educational purposes only.
```