Skip to content

Latest commit

 

History

History
9 lines (5 loc) · 484 Bytes

README.md

File metadata and controls

9 lines (5 loc) · 484 Bytes

SleepyCrypt

A shellcode function to encrypt a running process image in memory when sleeping.

This is the companion code for my blog post here.

Build

Just run build.sh to compile the C code, extract the .text section as shellcode, and compile it into a test binary called sleep.exe. This will require MinGW (x86_64-w64-mingw32-gcc, x86_64-w64-mingw32-ld, and objcopy) on Linux.