All times are in Pacific Daylight Time (UTC-0700).

  • Track: A: Friday 10/11 @ 1500-1550 PDT
  • Video

PErfidious is a Python3 tool that aims to directly take a benign PE executable and malicious shellcode, transform the malicious shellcode and inject the transformed shellcode directly into various parts of the executable’s .text section, thus completely avoiding the need to look for code-caves or creating additional sections. After injection, PErfidious recalculates the size of the .text section and all the virtual address changes caused by the increase in the size of the .text section and modifies respective fields in the PE header, thus making sure that the PE file doesn’t look injected.

Shreyans is a Cybersecurity Graduate Student at the University of Maryland and has previously worked as a Malware Research Intern at Cybrary Inc. Here he created PErfidious and researched other techniques that can be used to bypass modern endpoint detection systems. His main areas of interest are reverse-engineering, malware analysis, exploit...

Read More

twitter @0xbuilder

© 2023 ShellCon