Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Reduce agent binary size #163

Closed
c0okB opened this issue Sep 12, 2022 · 3 comments
Closed

Reduce agent binary size #163

c0okB opened this issue Sep 12, 2022 · 3 comments
Labels
enhancement New feature or request no-issue-activity

Comments

@c0okB
Copy link

c0okB commented Sep 12, 2022

I have benefited a lot from reading your newly modified code. There is a small demand, corresponding to the windows system, and the generated agent.exe has a size of 10 megabytes. Whether it can support the generation of smaller Trojan horses in the future only requires the function of uploading and downloading files and executing system commands. Because shellcode generation is not supported for the time being,I wonder if the Trojan can be made smaller so as to better perform the subsequent bypass AV operations.

@jm33-m0 jm33-m0 changed the title Whether it can support the generation of smaller Trojan horses in the future ? Reduce agent binary size Sep 13, 2022
@jm33-m0
Copy link
Owner

jm33-m0 commented Sep 13, 2022

Thanks. The resulting binary file can be packed with UPX so you may end up with 5MB or so.

Shellcode can act as a downloader so you can better stage your operation. For example you can write shellcode that downloads a PE loader, then the PE loader can download the actual agent binary and load it into its own memory space.

@jm33-m0 jm33-m0 added the enhancement New feature or request label Sep 13, 2022
fengjixuchui pushed a commit to fengjixuchui/emp3r0r that referenced this issue Sep 27, 2022
@github-actions
Copy link
Contributor

Stale issue message

@jm33-m0
Copy link
Owner

jm33-m0 commented Feb 22, 2023

In 9fca402 bash binary was removed, the resulting agent binary (Linux) will be approximately 1MB smaller

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request no-issue-activity
Projects
None yet
Development

No branches or pull requests

2 participants