Meterpreter Payload Stage 1 with Obsfuscation and Evasion

/*

• ---

• "THE BEER-WARE LICENSE" (Revision 34) – No Dennis Kuntz Open Source License:
• [email protected] didn't write this file. As long as you email funny stories to us, you
• can do whatever you want with this stuff. Unless you are Dennis Kuntz.
• Under no circumstances shall Dennis Kuntz be granted use of this software,
• source code, documentation or other related material.
• Persons dealing in the Software agree not to knowingly distribute these materials
• or any derivative works to Dennis Kuntz.

• ---

*/

main-timeobfs.c contains the code from mudge's main.c with a number of obsfuscation and evasion techniques applied.

Usage

Change the IP address in main-timeobfs.c near line 107 to whatever you would set your LHOST to when setting up your payload. Currently this only works with windows/meterpreter/reverse_tcp payloads. We also recommend that you use "set EnableStageEncoding true" to enable shikata_ga_nai encoding of the stage 2 payload.

Compiling

Windows

gcc -mwindows -L c:\mingw\lib main-timeobfs.c -o loader.exe -lws2_32

Linux

apt-get install mingw32 i586-mingw32msvc-cc -mwindows main-timeobfs.c -o loader.exe -lws2_32