Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/timwhitez/Doge-Loader

🐶Cobalt Strike Shellcode Loader by Golang
https://github.com/timwhitez/Doge-Loader

Last synced: 21 days ago
JSON representation

🐶Cobalt Strike Shellcode Loader by Golang

Host: GitHub
URL: https://github.com/timwhitez/Doge-Loader
Owner: timwhitez
Created: 2020-10-09T04:47:54.000Z (about 4 years ago)
Default Branch: main
Last Pushed: 2021-04-22T08:24:59.000Z (over 3 years ago)
Last Synced: 2024-08-05T17:26:53.850Z (4 months ago)
Language: Go
Homepage:
Size: 37.1 KB
Stars: 280
Watchers: 4
Forks: 59
Open Issues: 0
Metadata Files:
- Readme: README.md

Awesome Lists containing this project

awesome-hacking-lists - timwhitez/Doge-Loader - 🐶Cobalt Strike Shellcode Loader by Golang (Go)

README

![Doge-Loader](https://socialify.git.ci/timwhitez/Doge-Loader/image?description=1&font=Raleway&forks=1&issues=1&language=1&logo=https%3A%2F%2Favatars1.githubusercontent.com%2Fu%2F36320909&owner=1&pattern=Circuit%20Board&stargazers=1&theme=Light)

- 🐸Frog For Automatic Scan

- 🐶Doge For Defense Evasion&Offensive Security

# Doge-Loader
- Cobalt Strike Shellcode Loader by Golang

- 本项目感谢朋友gd, skate_zhu的帮助

- 此项目不进行后续更新，详见衍生新项目[Doge-Stealth-Framework](https://github.com/timwhitez/Doge-Stealth-Framework)

# 🐶Doge-Loader
本项目主要作用为Cobalt Strike的shellcode加载器

编译：go build -trimpath -ldflags "-w -s -H windowsgui"

项目结构如下：
```
main.go
主程序，用于远程下载shellcode并加载(需要自行上传shellcode(bin文件)并且修改源码里的url等参数)

xor.go
异或编码解码器

/enhancement
附加功能，主要用于免杀等（需自行在main.go中调用）

/enhancement/copy.go
程序自删除与自复制

/enhancement/sandbox.go
反沙箱，沙箱内部数据需要自行收集，见我后续项目

/local
本地shellcode文件分离加载

/local/bin/main.go
本地shellcode raw格式分离加载

/local/txt/main.go
本地shellcode文本格式异或分离加载（以/x开头）

/local/txt/xor/xor.go
shellcode异或编码
```
注：在开源前做了些取舍，去掉了下载的域前置，cdn ip轮询，代理穿透等功能。

仅为功能较为基础的shellcode加载器，可自行增添功能或协助丰富此开源项目。

# 🚀Star Trend
[![Stargazers over time](https://starchart.cc/timwhitez/Doge-Loader.svg)](https://starchart.cc/timwhitez/Doge-Loader)

## etc
1. 开源的样本大部分可能已经无法免杀,需要自行修改

2. 我认为基础核心代码的开源能够帮助想学习的人

3. 本人从github大佬项目中学到了很多

4. 若用本人项目去进行：HW演练/红蓝对抗/APT/黑产/恶意行为/违法行为/割韭菜，等行为，本人概不负责，也与本人无关

5. 本人已不参与大小HW活动的攻击方了，若溯源到timwhite id与本人无关